Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update container stack to the latest possible on kirkstone #932

Merged
merged 6 commits into from
Nov 20, 2022

Conversation

ricardosalveti
Copy link
Member

  • base: runc-opencontainers: update to 1.1.4
  • base: containerd-opencontainers: update to 1.6.9
  • base: docker-ce: update to 20.10.21
  • base: docker-compose: update to v2.10.2

We can't update docker-compose to the latest v2.12 as it requires golang 1.19, and we're still using 1.17.

Newer revision of runc fails to build with clang when building support
for seccomp.

Signed-off-by: Ricardo Salveti <[email protected]>
Release aligned with Docker-CE v20.10.18.

Relevant changes:
- 5fd4c4d1 Release 1.1.4
- 46a5a846 Merge pull request #3554 from kolyshkin/1.1-fix-dev-pts
- 204c673c [1.1] fix failed exec after systemctl daemon-reload
- 1c6dc765 Merge pull request #3562 from kolyshkin/1.1-ci-codespell-2.2
- ec2efc2c ci: fix for codespell 2.2
- 7c69bcc6 Merge pull request #3558 from kolyshkin/1.1-fix-cross-386
- c778598c [1.1] ci/gha: fix cross-386 job vs go 1.19
- b54084fb Merge pull request #3541 from kolyshkin/1.1-exec-noexec
- d83a861d Fix error from runc run on noexec fs
- 69734b99 merge branch 'pr-3536' into release-1.1
- d614445d [1.1] libct/nsenter: switch to sane_kill()
- f4aaf0d8 merge branch 'pr-3538' into release-1.1
- 3ca5673f CI: workaround CentOS Stream 9 criu issue
- c3986e53 tests/int: don't use --criu
- f46c0dad [1.1] ci: fix delete.bats for GHA
- 6b94849d tests/int: runc delete: fix flake, enable for rootless
- afda6b7c merge branch 'pr-3511' into release-1.1
- fa3354dc libct: fix mounting via wrong proc fd
- 1e7bb5b7 merge branch 'pr-3490' into release-1.1
- eb1552a0 VERSION: back to development
- 6724737f VERSION: release 1.1.3
- 91fa032d ci: add basic checks for CHANGELOG.md
- 5d74e0f0 Merge pull request #3504 from cyphar/1.1-systemd-devices-nonexistent-files
- 7219387e cgroups: systemd: skip adding device paths that don't exist
- da9b9d93 Merge pull request #3494 from eriksjolund/1.1-backport-3489
- 93d1807b libcontainer: relax getenv_int sanity check
- ff14258e merge branch 'pr-3481' into release-1.1
- 8242c05d script/seccomp.sh: check tarball sha256
- 017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4
- 131222d6 Merge pull request #3493 from cyphar/1.1-ns_last_pid
- 51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid
- 9d00472f merge branch 'pr-3479' into release-1.1
- 3a09da6b ci: drop docker layer caching from release job
- fa7cca98 Merge pull request #3478 from cyphar/1.1-seccomp-enosys-setup
- 8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x)
- 1839c392 Merge pull request #3476 from kolyshkin/1.1-dbus-err
- fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError
- 13e164db merge branch 'pr-3477' into release-1.1
- d105e052 libct/seccomp/config: add missing KillThread, KillProcess
- e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d
- dc083b2b fix deprecated ActKill
- b507e2da Merge pull request #3472 from kolyshkin/1.1-fix-fedora-ci-git
- bf1cd884 ci: use golangci-lint-action v3, GO_VERSION
- 1feafc31 ci: bump golangci-lint to v1.44
- 89f79ff0 libct: StartInitialization: fix %w related warning
- 3b7f2605 Format sources using gofumpt 0.2.1
- eeac4e77 build(deps): bump actions/checkout from 2 to 3
- cd7fa00d Vagrantfile.fedora: fix build wrt new git
- 8acb6a07 Merge pull request from GHSA-f3fp-gc8g-vw66
- cdfdbe55 VERSION: back to development
- a916309f VERSION: release 1.1.2
- 364ec0f1 runc: do not set inheritable capabilities
- 58546650 merge branch 'pr-3439' into release-1.1
- 8959e372 VERSION: back to development
- 52de29d7 VERSION: release 1.1.1
- 2636e1cb CHANGELOG.md: add 1.1.1 release notes
- ae28db14 Merge pull request #3436 from kolyshkin/1.1-add-centos-stream-9
- 036cc348 CI/cirrus: add centos-stream-9
- c6536328 Merge pull request #3438 from kolyshkin/1.1-fix-badges
- db953158 README.md: add cirrus-ci badge
- ea19181e README,libct/README: fix pkg.go.dev badges
- 6bf0a568 Merge pull request #3435 from mrunalp/dont_panic_1.1
- 8290c4cf libct/cg: IsCgroup2HybridMode: don't panic
- 6f48ab3e Merge pull request #3406 from marquiz/backports/rdt
- ee7ba6cb configs/validate: looser validation for RDT
- a3765fb4 Merge pull request #3404 from kolyshkin/1.1-delegate-enoent
- 96193422 libct/cg/sd/v2: fix ENOENT on cgroup delegation
- 51feb428 Merge pull request #3403 from kolyshkin/1.1-exec-subcgroup
- 35784a3e ensure the path is a sub-cgroup path
- b9460f26 Merge pull request #3355 from kolyshkin/1.1-rodev
- 986e7c53 libct: fixStdioPermissions: ignore EROFS
- 5053a065 libct: fixStdioPermissions: skip chown if not needed
- d2939b6b libct: fixStdioPermissions: minor refactoring
- d7f7b22a VERSION: back to development
- 067aaf85 VERSION: release runc v1.1.0
- c83abc50 Merge pull request #3331 from kolyshkin/nsenter-unsup
- c0e300f1 Refuse to build runc without nsenter
- 00f56786 Merge pull request #3328 from opencontainers/dependabot/go_modules/github.com/checkpoint-restore/go-criu/v5-5.3.0
- e155b332 build(deps): bump github.com/checkpoint-restore/go-criu/v5
- 81044ad7 Merge pull request #3325 from kolyshkin/rm-go115
- 5c7e8981 libct/cg: rm go 1.15 compatibility
- 7113a408 merge branch 'pr-3323'
- 4773769c VERSION: back to development
- 55df1fc4 VERSION: release v1.1.0-rc.1
- 6c1e2ecc Merge pull request #3320 from cyphar/changelog
- a8f9d5de CHANGELOG: add an in-repo changelog file
- 7e792c92 merge branch 'pr-3301'
- 4e56a2b3 Merge pull request #3313 from kolyshkin/int-nits
- e7dfcc93 Merge pull request #3314 from kolyshkin/seccomp-2.5.3
- 6d2067a4 script/seccomp.sh: fix argc check
- 457ca62f script/release_*.sh: fix usage
- c729594c deps: update libseccomp to 2.5.3
- 1b747a43 merge branch 'pr-3309'
- 5d779620 tests/int: use update_config in hooks test
- 9e798e26 tests/int: ability to specify binary
- 13b0806f Merge pull request #3272 from AkihiroSuda/mount-rro
- 4b22d8e4 Merge branch 'pr-3310'
- cd07af28 Merge pull request #3304 from kolyshkin/lint-extra
- 97688ddf types/features: clarify MountOptions
- deb0a5f2 Mark `runc features` experimental
- 382eba43 Support recursive mount attrs ("rro", "rnosuid", "rnodev", ...)
- ba935a51 Support nosymfollow mount option (kernel 5.10)
- f8c48e46 go.mod: golang.org/x/sys v0.0.0-20211116061358-0a5406a5449c
- acd8f12f release: correctly handle binary signing for "make releaseall"
- cdce2496 merge branch 'pr-3057'
- 2b0ca195 merge branch 'pr-3296'
- f50369af Merge pull request from GHSA-v95c-p5hm-xq8f
- d72d057b runc init: avoid netlink message length overflows
- 45c31f9e Merge pull request #3305 from kolyshkin/rdt-4
- 25112dd1 libct/intelrdt: remove unused type
- c4a61aa9 ci: enable extra linters for new code
- 0c0ec3f5 Merge pull request #3302 from kolyshkin/ci-unparam
- 520702da Add `runc features` command
- 02475d9c .golangci.lint: add unparam linter
- 953e56c5 libct/int: runContainer: drop console arg
- 6c0bfcb1 libct/cg/fs/blkio_test: ignore unparam warning
- 06b3fd9d libct/cg/ebpf: drop finalize return value
- 86733013 notify_socket: setupSpec: drop ctx arg and return value
- 741568eb libct/cg/devices: addRule: ignore unparam warning
- fc44e3f6 tty: Close: rm return value
- 36483465 tty: ClosePostStart: rm return value
- f3f4b6d1 tty: recvtty: rm process arg
- e6318635 tty: rm inheritStdio return value
- d23b8109 checkpoint: rm getDefaultImagePath arg
- dd140401 libct: fixStdioPermissions: rm config arg
- b357bc13 libct/factory: rm id param from loadState
- b950b778 libct/utils: ResolveRootfs: remove
- 35d20c4e chown cgroup to process uid in container namespace
- 6ff04202 Merge pull request #3234 from kolyshkin/hugepage-v2
- 19d696ec merge branch 'pr-3276'
- 0e79754c Merge pull request #3294 from kolyshkin/xattr
- ec0f35bc libct/system/xattrs: remove
- 20feb5d3 Merge pull request #3290 from opencontainers/dependabot/go_modules/github.com/opencontainers/selinux-1.10.0
- e23602eb Merge pull request #3284 from kolyshkin/ci-fedora-revert-fix
- 02fe5f47 Merge pull request #3283 from kolyshkin/rootless-ro-bind-rw
- e9ed2000 build(deps): bump github.com/opencontainers/selinux from 1.9.1 to 1.10.0
- d1f316f3 Merge pull request #3286 from chendave/cleanup
- e3dd80fa Vagrantfile.fedora: revert excluding systemd
- 1da84d1a libct/cg: TestGetHugePageSizeImpl: use t.Run
- 1362291a Avoid non-op when the list of `Hooks` is empty
- eba6097a Merge pull request #3287 from cyphar/netlink-embedded-nulls
- f13a9325 libct/cg: HugePageSizes: simplify code and test
- 39d4c8d5 libct/cg: lazy init for HugePageSizes
- a4d4c4dd libct/cg: GetHugePageSize -> HugePageSizes
- 8b4a8f09 merge branch 'pr-3289'
- dde509df specconv: do not permit null bytes in mount fields
- 50105de1 Fix failure with rw bind mount of a ro fuse
- 982b9a1d libct/standard_init: fix linter warning
- 0d5ac132 Merge pull request #3285 from kolyshkin/3281-followups
- 643f8a2b libct/specconv: nits
- 20e92887 Merge pull request #3275 from kolyshkin/rm-prlimit
- e49007f3 Merge pull request #3281 from kolyshkin/specconv-maps
- b247cd39 runc run: fix ro /dev
- 7c219d81 Merge pull request #3270 from kolyshkin/wrap-err
- f247ad20 Merge pull request #3280 from kolyshkin/ci-revert-kludge
- 029b73c1 libct/spec: replace isValidName regex with a function
- 6907beca libct/specconv: remove isSecSuffix regex
- 37c5fd55 libct/specconv: make parseMountOptions return Mount
- 2c3792ba libct/specconv: make mountFlags and extensionFlags global
- 81586e19 libct/specconv: reuse mountPropagationMapping in parseMountOptions
- 8fe1e8bf libct/specconv: rm some init allocations
- 712157f6 Revert "ci: temporarily disable criu repo gpg check"
- f252eb54 test/int/mount.bats: refer to github issue
- 7563a8f0 libct: wrap more unix errors
- db4ad6a7 libcontainer/system: rm Prlimit
- c1103d98 merge branch 'pr-3273'
- 0880c001 .cirrus.yml: silence vagrant up
- b028ecb3 Vagrantfile.fedora: exclude systemd from upgrade
- cbd725e6 Merge pull request #3223 from kolyshkin/refuse-bad-cgroup
- 5948764a Merge pull request #3263 from thaJeztah/bump_mountinfo
- 86829836 Merge pull request #3264 from thaJeztah/cirrus_go_version
- 12a36265 ci/cirrus: update to Go 1.17.3
- 02d527d2 go.mod: github.com/moby/sys/mountinfo v0.5.0
- 0e21d56e go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
- ecdc9664 Merge pull request #3262 from opencontainers/dependabot/go_modules/github.com/checkpoint-restore/go-criu/v5-5.2.0
- b2d64fed build(deps): bump github.com/checkpoint-restore/go-criu/v5
- b6475489 Merge pull request #3257 from mengjiao-liu/sysctl-allow-slash
- a9bb11ec Fix the conversion of sysctl variable dots and slashes
- 0f933d54 Rename package validate_test to package validate
- 68c2b6a7 runc run: refuse a frozen cgroup
- d08bc0c1 runc run: warn on non-empty cgroup
- dd696235 runc exec: reject paused container unless --ignore-paused
- 931eb942 Merge pull request #3261 from kolyshkin/test-f35
- 4b25a4e8 CI: update Fedora to 35
- 7324496f tests/int: fix userns for Fedora 35
- 05272718 tests/int/cgroups: fix for misc controller
- a7ccc02f Merge pull request #3251 from opencontainers/dependabot/go_modules/github.com/godbus/dbus/v5-5.0.6
- a9761c4b Merge pull request #3254 from kolyshkin/sysctl-slash
- fc658fb6 build(deps): bump github.com/godbus/dbus/v5 from 5.0.5 to 5.0.6
- 972aea3a libct/configs/validate: allow / in sysctl names
- fac268b4 Merge pull request #3252 from AkihiroSuda/fix-libcontainer-integration-compilation-failure
- 95f8ecdd fix `libcontainer/integration/exec_test.go:1859:8: undefined: ioutil`
- 4d176544 Merge pull request #2576 from kinvolk/alban/userns-2484-take2
- af16f56a Merge pull request #3242 from opencontainers/dependabot/go_modules/github.com/cilium/ebpf-0.7.0
- 0bbd7bd7 Merge pull request #3231 from najohnsn/no-linux-section
- d5c9905b Merge pull request #3235 from kolyshkin/rm-exc-lock
- dc473cad build(deps): bump github.com/cilium/ebpf from 0.6.2 to 0.7.0
- 6d35069b Merge pull request #3245 from kolyshkin/go116
- 8542322d libcontainer: Add unit tests with userns and mounts
- d8a3446a Merge pull request #3002 from iholder-redhat/feature/TestingSkipFinalCheckPublic
- 55162941 Remove io/ioutil use
- 6a4f4a6a libcontainer/ignoreTerminateErrors: simplify for Go 1.16+
- 12e99a0f Require Go >= 1.16
- 3d986766 ci/gha: install latest stable Go version
- 97875b0a Merge pull request #3246 from kolyshkin/fix-ci
- c5ca778f ci: temporarily disable criu repo gpg check
- 81fdc8ce New integration tests for user namespaces bind sources
- 9c444070 Open bind mount sources from the host userns
- 2357eab8 Merge pull request #3233 from kolyshkin/hugepage-fix
- a5a45c73 Merge pull request #3239 from kolyshkin/rdt-path
- b098f33c Merge pull request #3238 from kolyshkin/wrap-exec-err
- a80e1217 libct/intelrdt: add Root()
- 794cd66d libct/system: Exec: wrap the error
- 3a5223d0 merge branch 'pr-3236'
- 6eba68de build(deps): bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1
- f594edee Merge pull request #3059 from kolyshkin/cgroup-clean
- e395d2dc libct: Init: remove LockOSThread
- 916c6a15 libct/cg/fs2: fix GetStats for unsupported hugetlb
- c670691e Merge pull request #3226 from chenk008/fix_delete_cgroupv2
- f9667e63 Make DevicesGroup's "TestingSkipFinalCheck" attribute public
- 8e7ab261 Merge pull request #3230 from kolyshkin/release-arch-followup
- 2e0ceaa9 fix createDevices when no Linux section
- fae5d8b5 release: add s390x
- f95063ed Dockerfile: fix for seccomp
- 7758d3fb libct/cg/sd/v2: Destroy: remove cgroups recursively
- d1c9b43e merge branch 'pr-3228'
- 580e43ec contrib: rm init from bash completion
- 0202c398 runc exec: implement --cgroup
- cc15b887 tests: add integration test for cgroups hybrid
- a8435007 cgroups: join cgroup v2 when using hybrid mode
- 39914db6 runc exec: don't skip non-existing cgroups
- 7d446c63 libct/cg.WriteCgroupProcs: improve errors
- cc1d7466 exec.go: nit
- e999e29a merge branch 'pr-3222'
- b1b0e7f8 Merge pull request #3216 from kolyshkin/manager-new
- 0d297b71 ci/gha: test criu-dev with latest go
- 16aedc31 ci/gha: remove debug info
- 3fd1851c CI/GHA: switch to OBS criu repo
- 81dc5599 Dockerfile: fix apt-key warning
- 2bf560fb Dockerfile: use Debian_11 repo for criu
- 99ddc1be libct/cg/fs: rm m.config == nil checks
- 57edce46 libct/cg: add Resources=nil unit test
- 1af4ed11 libct/cg/sd/v2: move fsMgr init to NewUnifiedManager
- 9a2146fa libct/cg/sd/v2: move path init to NewUnifiedManager
- 39be6e97 libct/cg/fs2: minor optimization
- b14a6cf9 libct/cg/sd/v1: move path init to NewLegacyManager
- fcc48168 libct/cg/fs: document path removal
- 6c5441e5 libct/cg/fs: move paths init to NewManager
- 097c6d74 libct/cg: simplify getting cgroup manager
- 147ad561 Merge pull request #3197 from kolyshkin/release-arm64
- 79185bc8 Merge pull request #3215 from kolyshkin/cgroupv1-opts
- 03244ef2 Merge pull request #3217 from kolyshkin/delete-paused
- 3c8db638 script/release.sh: update libseccomp to 2.5.2
- f30244ee make release: add cross-build
- 206c16a7 Merge pull request #3068 from adrianreber/2021-07-07-lsm-mount-context
- 23d79aae Makefile: only build runc for static target
- d2b6899e Makefile: fixes for seccompagent
- 43b36dc4 Support changing of lsm mount context on restore
- 412d68d1 Vendor in go-criu v5.1.0
- d362b7ac Merge pull request #3219 from zhsj/simple-bits
- 163e2523 libct/cg: replace bitset with std math/big library
- 6806b2c1 runc delete -f: fix for cg v1 + paused container
- dbc294fc merge branch 'pr-3214'
- e6928865 libct/cg/fs: refactor
- 7d1cb320 libct/cg/fs: rename join to apply
- 5c7cb837 libct/cg/fs: micro optimization
- 19b542a5 libct/cg/fs: move internal code out of fs.go
- eb09df74 libct/cg/sd/v1: initPaths: minor optimization
- 63c84917 libct/cg/sd/v1: optimize initPaths
- c7e0864d libct/cg/sd/v1: factor out initPaths
- dc907e8d libct/cg/sd/v*.go: nit
- d974b22a create, run: amend final errors
- 9ba2f65d startContainer: minor refactor
- 1545ea69 delete, start: remove newline from errors
- bcadc5bf Merge pull request #3206 from kinvolk/rata/notify
- cd7df39a Merge pull request #3201 from kolyshkin/nsexec-less-logs
- 2eaeea77 Merge pull request #3207 from kolyshkin/update-shfmt
- af641cd5 seccomp: Add test using the seccomp agent example
- 5906c673 merge branch 'pr-3208'
- 7e9fd994 Merge pull request #3211 from opencontainers/dependabot/go_modules/github.com/bits-and-blooms/bitset-1.2.1
- eedf585a Merge pull request #3210 from opencontainers/dependabot/go_modules/github.com/opencontainers/selinux-1.8.5
- 08659080 build(deps): bump github.com/bits-and-blooms/bitset from 1.2.0 to 1.2.1
- 622acd24 build(deps): bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5
- 47abdcee ci/gha: update golangci-lint to 1.42.1
- 704a1878 contrib/cmd/seccompagent: fix build tags
- 49137c2a ci/gha: bump shfmt to 3.3.1
- f1b703fc libct/nsenter/nsexec.c: honor _LIBCONTAINER_LOGLEVEL
- d5ffe83f libct/nsenter/nsexec.c: factor out getenv_int
- d2f49d45 libct/nsenter/nsexec.c: improve bail
- 6c4a3b13 runc init: pass _LIBCONTAINER_LOGLEVEL as int
- 0a3577c6 utils_linux: simplify newProcess
- 9e22bca5 Merge pull request #3204 from cyphar/seccomp-kill-thread-process
- 51cd519e seccomp agent: Return non-zero on failures
- 8b790e4f seccomp agent: Use arch SCMP_ARCH_X86_64
- 4a4d4f10 Add support for seccomp actions ActKillThread and ActKillProcess
- 4a751b05 seccomp: drop unnecessary const SCMP_ACT_* defines
- 41936bf8 Merge pull request #3203 from opencontainers/dependabot/go_modules/github.com/godbus/dbus/v5-5.0.5
- 76c15834 merge branch 'pr-3186'
- 3eccbe99 merge branch 'pr-3157'
- 1e5fe26f merge branch 'pr-2696'
- 8bf03260 merge branch 'pr-3047'
- 72b5c3ca build(deps): bump github.com/godbus/dbus/v5 from 5.0.4 to 5.0.5
- 9a0419b9 merge branch 'pr-2682'
- 110bdb02 Merge pull request #3200 from kolyshkin/release-fix-for-opensuse
- 00772cae tests: add functional tests for seccomp notify
- 5ae831d9 tests: add functional tests for seccomp
- e21a9ee8 contrib: add sample seccomp agent
- c64aaf0e libcontainer/specconv: extend SetupSeccomp tests
- 2b025c01 Implement Seccomp Notify
- 4e7aeff6 libcontainer/utils: introduce SendFds
- c55530be vendoring: Use libseccomp with notify support
- a244d579 Merge pull request #3198 from Vanient/master
- 64358c4d optimize log: move WriteJSON defer as early as possible
- 39d0ee18 script/release.sh: fix for opensuse
- a20c8b29 runc --debug: shorter caller info
- b55b3081 libct/logs: do not show caller in nsexec logs
- c3910e73 libct/logs: parse log level implicitly
- c4826905 libct/logs: test: make more robust
- 963e0146 Merge pull request #3158 from kolyshkin/nsenter-tests
- 7fcfb3fa Merge pull request #3030 from kolyshkin/openat2-improve
- 33dcb994 libct/nsenter/nsenter_test.go: logging nits
- 78b27155 libct/nsenter: test: rm misleading comments
- 2c46455c libct/nsenter: test: improve TestNsenterChildLogging
- feb1fe11 libct/nsenter: test: fix TestNsenterValidPaths
- 3df6a02f libct/nsenter: test: improve newPipe
- bd75bc2d Merge pull request #3176 from kolyshkin/rm-config-error-alt
- bde65de7 Merge pull request #3192 from kinvolk/rata/cgo-warnings
- 5fb9b2a0 Merge pull request #3185 from kolyshkin/go117-build-tags
- 347c371b CI: Mark CGO warnings as errors
- b144f3d3 Merge pull request #2825 from lifubang/nodelete
- 0d193edb Merge pull request #3190 from presztak/nsexec_bail_message_typo_fix
- d8da0035  *: add go-1.17+ go:build tags
- 1b17ec95 libct/cg: rm "unsupported.go" files
- dbb9fc03 libct/*: remove linux build tag from some pkgs
- c5b0be78 Rm build tags from main pkg
- 9ff64c3d *: rm redundant linux build tag
- 3c7db382 Merge pull request #2883 from flouthoc/master
- 62ec6dc9 Merge pull request #2920 from marquiz/devel/rdt
- 895e0a5c nsenter: fix typo in bail message
- 11d141be Merge pull request #3090 from kolyshkin/cfq_quota_period
- 1f5798f7 improve error message when dbus-user-session is not installed
- 63944578 tests/int: add a "update cpu period with pod limit set" test
- 1b2adcfe libct/cg/v1: workaround CPU quota period set failure
- 654f3319 Merge pull request #3175 from kolyshkin/tests-int-cleanups
- 8b59b768 Merge pull request #3182 from cyphar/revert-3159
- b4b79720 Merge pull request #3136 from kolyshkin/cg-d-c
- 09b80811 Revert "libct/devices: change devices.Type to be a string"
- f67f1efc Merge pull request #3110 from kolyshkin/parse-devices
- 538ba846 libct/error.go: rm ConfigError
- 6145628f configs/validate: audit all returned errors
- bbcf96f9 libct/cg/devices: stop using regex
- 34df203d Merge pull request #3159 from thaJeztah/norunes
- fb629db6 tests/int/helpers: fix shellcheck warnings
- f65276db tests/int/helpers: rm $bundle handling
- b3d14488 Add support for rdma cgroup introduced in Linux Kernel 4.11
- 8d8415ee libct/logs: remove ConfigureLogging
- f77fb7a3 init.go, main.go: don't use logs.ConfigureLogging
- 93937000 libcontainer/intelrdt: update code comments
- a37a89f4 libct/system: add I and P process states
- f90008ae libct/system.Stat: fix/improve/speedup
- 412c6f06 libct/system/proc_test: fix, improve, add benchmark
- 3023e6c6 Merge pull request #3166 from kolyshkin/fix-freeze-before-set-alt-2
- 926a9a08 Merge pull request #3171 from kolyshkin/try-bullseye
- 74ae9e0f checkpoint: resolve symlink for external bind mount(fix ci broken)
- 8e6871a3 Merge pull request #3116 from kolyshkin/ci-add-criu-dev
- 24d318b8 Dockerfile: switch to bullseye
- 9835e9c6 Merge pull request #3021 from kolyshkin/go-1.17beta1
- 9a095e44 libct/cg/sd/v1: add SkipFreezeOnSet knob
- fec49f2a libct/cg/sd/v1: add freezeBeforeSet unit test
- 41043673 libct/cg/sd/v1: Fix unnecessary freeze/thaw
- 4d26c4a0 Merge pull request #3144 from kolyshkin/codespell
- ba7a8773 Merge pull request #3168 from kolyshkin/fix-cc-warn
- a5871801 ci: add go1.17
- 75761bcc Fix codespell warnings, add codespell to ci
- db8330c9 libct/nsenter: fix unused-result warning
- e53e97a8 Merge pull request #3164 from kinvolk/rata/make-no-buildtags
- dff41686 Merge pull request #3160 from kailun-qin/fix-check
- ca4433f6 Merge pull request #3153 from kolyshkin/cirrus-robust
- 10f179c8 Merge pull request #3162 from kailun-qin/null-on-error
- 844d6774 CI: Validate compilation without buildtags
- 55e93b89 Merge pull request #3150 from kolyshkin/maintainers
- 51508210 libct/nsenter: nullify pointer on asprintf error
- 2ab6484f libct/nsenter: no need to check size_t less than 0
- f0dbefac .cirrus.yum: retry yum if failed
- 814f3ae1 libct/devices: change devices.Type to be a string
- 74b5c34e .cirrus.yml: simplify
- bb34048f Merge pull request #3152 from opencontainers/dependabot/go_modules/github.com/containerd/console-1.0.3
- 77fb9aff build(deps): bump github.com/containerd/console from 1.0.2 to 1.0.3
- bd50e7c4 libct/cg/OpenFile: check cgroupFd on error
- b114862c Merge pull request #3120 from kolyshkin/nsexec-log-race
- ab577f6f MAINTAINERS: add Sebastiaan van Stijn
- 2bab4a56 libct/nsenter: fix logging race in nsexec
- 16027b81 Merge pull request #3140 from opencontainers/dependabot/go_modules/github.com/opencontainers/selinux-1.8.4
- bda1bd7a build(deps): bump github.com/opencontainers/selinux from 1.8.3 to 1.8.4
- 7d4bac68 merge branch 'pr-3133'
- c2d9668c libct/cg/OpenFile: fix openat2 vs top cgroup dir
- 1b4c30fd libcontainer/intelrdt: always run unit tests
- 79d292b9 libcontainer/intelrdt: verify ClosID existence
- 17e3b41d libcontainer/intelrdt: support ClosID parameter
- 7296dc17 libcontainer/intelrdt: refactor clos path handling
- 1cbfe234 libct/cg: rm dead code
- d0c3bc44 libct/cg: GetAllPids: optimize for go 1.16+
- 363468d0 libct/cg: improve GetAllPids and readProcsFile
- 504271a3 libct/cg: move GetAllPids out of utils.go
- 8772c4dd Merge pull request #3109 from kolyshkin/seccomp
- 64b3fe91 Merge pull request #3117 from kolyshkin/cirrus-nit
- c9b8b4f3 Merge pull request #3073 from kolyshkin/runc-exec-255
- 907c8def Merge pull request #3125 from opencontainers/dependabot/go_modules/github.com/opencontainers/selinux-1.8.3
- fc99ab7e build(deps): bump github.com/opencontainers/selinux from 1.8.2 to 1.8.3
- 0f94799e man/runc-run.8: document --keep option
- cb824629 proposal: add --keep to runc run
- 2aabb297 Merge pull request #3113 from kolyshkin/init-rm-code
- d962bb0c merge branch 'pr-3099'
- e06465ac ci/cirrus: remove unused code
- 120f7406 ci/gha: add latest criu-dev test run
- 60e02b4b runc exec: fail with exit code of 255
- 18f434e1 script/release.sh: make builds reproducible
- 61e201ab makefile: update ldflags and add strip for static builds
- 1f5f237b Merge pull request #3100 from kolyshkin/drop-go-1.13
- 5110bd2f nsenter: remove cgroupns sync mechanism
- 7a0302f0 runc init: simplify
- a91ce306 libct/*_test.go: use t.TempDir
- 3bc606e9 libct/int: adapt to Go 1.15
- 1eeaf113 libct/intelrdt/*_test.go: use t.TempDir
- f6a56f60 libct/cg/fs/*_test.go: use t.TempDir
- 2d1645d2 libct/cg/fscommon: drop go 1.13 compatibility
- 6215b2f3 ci/gha: drop Go 1.13
- a952b5aa README, go.mod: require go 1.15+
- 12a1dccb Revert "libcontainer: avoid using t.Cleanup"
- 015fa29a Revert "Revert "Makefile: rm go 1.13 workaround""
- 5dd92fd9 libct/seccomp: skip redundant rules
- e44bee10 libct/seccomp: warn about unknown syscalls
- 073e085c libct/seccomp: ConvertStringToAction: fix doc
- 4071c3cd Merge pull request #3104 from adrianreber/2021-07-20-vagrant
- 9f656dbb Do not use Vagrant for CentOS 7/8
- d4480164 tests/rootless.sh: fixup for "update rt" test
- 86af5248 tests/int: fix "update rt period and runtime" for rootless
- 713748d4 Merge pull request #3103 from AkihiroSuda/remove-abandoned-policy
- cc0b1644 README.md: remove abandoned versioning policy
- 6e210a1d Merge pull request #3088 from AkihiroSuda/cirrus
- 87bfd20f Evaluate Cirrus CI for Vagrant tests
- 2749f1f1 Merge pull request #3082 from kolyshkin/freeze-less
- a7110262 libct/cg/sd: add TestPodSkipDevicesUpdate
- 52dd96db libct/cg/sd: TestFreezePodCgroup: rm explicit freeze
- f2db8798 libct/cg/sd/v1: Set: avoid unnecessary freeze/thaw
- 5dc32604 libct/int/TestFreeze: test freeze/thaw via Set
- af1688a5 libct/int: allow subtests
- 67cfd3d4 libct/cg/sd/v1: Set: don't overwrite r.Freezer
- 8de0a5c8 merge branch 'pr-3089'
- d02b0061 ci/gha: run on release-* branches after a push
- fceadf23 Merge pull request #3055 from cyphar/cgroup-bpf-replace-selinux
- 57e3c541 cgroupv2: ebpf: ignore inaccessible existing programs
- fe518a06 vendor: update github.com/cilium/ebpf
- 2c01cec8 merge branch 'pr-3067'
- dc3236f9 Merge pull request #3070 from kolyshkin/unconvert
- 3a041e96 Merge pull request #3081 from kolyshkin/carry-3065
- 9493bb82 Merge pull request #3041 from kolyshkin/rtd-cleanups
- 4f3fab9b Merge pull request #3069 from odinuge/devices-caps
- 497e4032 Merge pull request #3058 from kinvolk/rata/nsexec-close-bug
- 3e5c1997 libct/cg/sd: Add freezer tests
- 294c4866 libct/cg/fs/freezer.GetState: report current cgroup state
- 262f294a merge branch 'pr-3062'
- ccf6a94f Merge pull request #3045 from anmaxvl/retry-unix-eintr
- f33be7cc libct/cg/sd: Don't freeze cgroup on cgroup v2 Set
- d41a273d Update device update tests
- be1d5f83 ci: enable unconvert linter, fix its warnings
- 6be088d6 tests/int/dev: add CAP_SYSLOG to /dev/kmsg tests
- 71a3756b Merge pull request #3063 from cyphar/filepath-securejoin-update
- 9f2a1f4d deps: update to github.com/cyphar/[email protected]
- 24d5daf5 libct/user: fix parsing long /etc/group lines
- 226dfab0 libct/user: ParseGroupFilter: use TrimSpace
- 120e3a77 libct/user: use []byte more, avoid allocations
- 83776dd8 libcontainer: Bail on close(2) failures
- 7d479e6b libcontainer: Don't close fds already closed
- e39ad650 retry unix.EINTR for container init process
- 5547b577 Merge pull request #3033 from kolyshkin/rm-own-errors
- 4e56bb44 Merge pull request #3053 from kailun-qin/consolidate-utils
- c508a7bc libct/rootfs: consolidate utils imports
- b12e6bca Merge pull request #3051 from kolyshkin/test-int-fix-unshare
- 1bbeadae tests/int/no_pivot: fix for new kernels
- 24aff17b Merge pull request #3048 from opencontainers/dependabot/go_modules/google.golang.org/protobuf-1.27.1
- 0229a77a libcontainer/intelrdt: privatize some ids
- 8f8dfc49 libcontainer/intelrdt: move NewLastCmdError down
- 00d15629 libct/intelrdt: simplify NewLastCmdError
- e0ce428b libct/intelrdt: remove NotFoundError type
- feff2c45 libct/intelrdt: fix potential nil dereference
- 82498e3d libct/specconf: remove unneeded checks
- bc96a59d build(deps): bump google.golang.org/protobuf from 1.26.0 to 1.27.1
- e5ccc4b9 merge branch 'pr-3043'
- 70fdc057 Revert "checkpoint: resolve symlink for external bind mount"
- 1079288b Merge pull request #2902 from liusdu/checkpoint
- 245fe2b6 Merge pull request #3029 from liusdu/work
- e618c02d libct/stacktrace: remove
- e918d021 libcontainer: rm own error system
- 60c647a7 libct/error: rm ConsoleExists
- 51beb5c4 merge branch 'pr-3011'
- a7cfb23b *: stop using pkg/errors
- b60e2edf libct/cg: stop using pkg/errors
- a6cc36a8 libct/cg/ebpf: stop using pkg/errors
- f137aaa2 libct/cg/devices: stop using pkg/errors
- ebb08128 .golangci.yml: enable errorlint
- 56e47804 *: ignore errorlint warnings about unix.* errors
- f6a0899b *: use errors.As and errors.Is
- 5d2a11ad tty.go: don't use pkg/errors, use errors.Is
- c6fed264 libct/keys: stop using pkg/errors
- adbac31d libct: fix errorlint warning about strconv.NumError
- 7be93a66 *: fmt.Errorf: use %w when appropriate
- d8ba4128 libct/rootfs: improve some errors
- 36aefad4 libct: wrap unix.Mount/Unmount errors
- 825335b2 libct/cg/fs2: fix/unify parsing errors
- 5a186d39 libct/cg/fs: fix/unify parsing errors
- f813174d libct/cg/fscommon: introduce and use ParseError
- adcd3b44 libct/cg/fs[2]: simplify getting pid stats
- 4e330942 libct/cg/fs/stats_util_test: fix errors
- 563225d5 libct/StartInitialization: fix errors
- 3fee59f9 libct/cg/fs/*_test: simplify errors
- fdf4e90e libct/cg/fscommon.ParseKeyValue: no need to wrap err
- 627a06ad Replace fmt.Errorf w/o %-style to errors.New
- 242b3283 libct/cg/fscommon: rm unused var
- 92e8d9b9 libct/intelrdt: error message nits
- 2fc269d7 merge branch 'pr-2971'
- 9f937782 merge branch 'pr-3032'
- 041caf10 VERSION: back to development
- dfc0f069 man/*: revamp
- 85aabe23 C/R: let criu use its default if --work-path is not set
- e8bd33ae runc --help: improve log options description
- cf4ecaed runc update: hide --kernel* options
- 4065c394 exec: rm --no-subreaper flag
- da22625f checkpoint: resolve symlink for external bind mount

Signed-off-by: Ricardo Salveti <[email protected]>
Release aligned with Docker-CE v20.10.21.

Changes also aligned with latest from meta-virtualization (1.6.8).

Relevant changes:
- 1c90a4424 Merge pull request #7573 from samuelkarp/release/1.6.9
- 96929a5d3 Merge pull request #7574 from swagatbora90/backport-cap-bpf-perfmon
- f1493f665 Prepare release notes for v1.6.9
- 346412f5a adding support of CAP_BPF and CAP_PERFMON
- 99578d1fc Update mailmap
- 8b9c35a19 Merge pull request #7571 from sophieliu15/release/1.6
- a956d8415 Add logging volume metrics to Containerd CRI plugin
- 8658d0b51 Merge pull request #7562 from dcantah/cp-concurrent-closech
- 29e2dea50 fix pusher concurrent close channel
- 9a194f78b Merge pull request #7557 from kzys/backport/1.6/stats-nil
- 9edb14386 Merge pull request #7551 from samuelkarp/ip-leakage-flake/1.6
- 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil
- 74e9e4c43 Merge pull request #7549 from SergeyKanzhelev/switchToRegistry
- a9adc7938 cri: PodSandboxStatus should tolerate missing task
- b66eb726a migrate from k8s.gcr.io to registry.k8s.io
- 6afbeac96 Merge pull request #7518 from kzys/backport/1.6/continuity-fix
- 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0
- dccb15294 Merge pull request #7505 from qiutongs/backport-netns-1.6
- f2376e659 Update container with sandbox metadata after NetNS is created
- d9e2ba255 Merge pull request #7490 from samuelkarp/archive-dgst-validate/1.6
- 06f82efef archive: validate digests before use
- 1eb637f95 Merge pull request #7475 from thaJeztah/1.6_bump_go_1.18.7
- 6496ac61e Merge pull request #7461 from akhilerm/cherry-pick-6995-1.6
- 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
- 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0
- 7db9d1f76 Fix linter warnings
- 4dc932e62 [release/1.6] gofmt with go1.19
- 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil
- a91dd679b Merge pull request #7456 from qiutongs/backport-ip-leakage-1.6
- 926b9c72f retry request on writer reset
- b9a35c6af Add integration tests with failpoint
- 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork
- 6338ef8d1 Merge pull request #7455 from qiutongs/backport-failpoint-1.6
- a85709c6c integration: simplify CNI-fp and add README.md
- d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc
- b0ce2965a integration: Add injected failpoint testing for RunPodSandbox
- a7f956d86 integration: CNI bridge wrapper with failpoint
- 07c479471 pkg/failpoint: add DelegatedEval API
- 4a5bc05aa runtime/v2/shim: return if error in load plugin
- 71ee7de24 bin/ctr,integration: new runc-shim with failpoint
- 3e2e77849 runtime/v2: manager supports server interceptor
- cb935bf49 pkg/failpoint: init failpoint package
- 2cbb524b9 Merge pull request #7447 from estesp/cp-7094-1.6
- 2fdfd564c make xattr EPERM non-fatal in createTarFile
- 7b93a228e Merge pull request #7438 from Iceber/skip_verify_1.6
- 89e49609d remotes/docker/config: Skipping TLS verification for localhost
- bf1b93eac Merge pull request #7427 from fuweid/16-cp-7369-7416
- b720be2ce remove stray .zuul.yaml
- 6b30bc4b4 .zuul: remove the zuul because it is offline
- 3228848c6 Merge pull request #7421 from ruiwen-zhao/release-1.6-grpc
- 0f7e258ee Set grpc code for unimplemented cri-api methods
- 462caf1eb Merge pull request #7410 from ruiwen-zhao/container_resource_1.6
- fb753e5cd update intergration
- 6ee5bb7ea bump cri-api
- ae8598615 ContainerStatus to return container resources
- d3c7e31c8 Update CRI-API
- 23d2278a2 Merge pull request #7340 from dcermak/backport-golang-x-crypto-vendor
- 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd
- de1a1905d Merge pull request #7333 from thaJeztah/1.6_backport_runc
- 3507d600b update runc binary to v1.1.4
- 579a6380e Merge pull request #7299 from samuelkarp/ci-workflow-goproxy/1.6
- 1be2cb348 Merge pull request #7298 from deckhouse/docker-compat-1.6
- 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887
- 0448673af Do not append []string{""} to command to preserve Docker compatibility
- 9ff72800f Merge pull request #7274 from mxpv/critest
- 5c230ece0 Fix cleanup in critest
- 026ac1c17 Merge pull request #7268 from thaJeztah/1.6_backport_no_tun
- 9cd3357b7 Merge pull request #7263 from dmcgowan/prepare-1.6.8
- ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices
- 3364f411e Prepare release notes for v1.6.8
- a76f3c831 Merge pull request #7261 from samuelkarp/release-workflow/1.6
- 390920429 release workflow: remove Go setup action
- cf48ba6e8 release workflow: increase timeout to 30 minutes
- 76f5db42f Merge pull request #7260 from samuelkarp/fix-7255/1.6
- 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64)
- 0197261a3 Merge pull request #7250 from dmcgowan/release-1.6-update-build-timeout
- eccb82f6d Update release build timeout to 20 minutes
- 5f242b5bf Merge pull request #7225 from dcantah/v1.6.7-rnotes
- 6a854d4b5 Update mailmap
- 61612e1a2 Prepare release notes for 1.6.7
- 78f438957 Merge pull request #7244 from dcantah/update-go-1.17.13
- d199ee462 Update golang to 1.17.13
- d97553c9a Merge pull request #7242 from dcantah/cp-windows-svc-osstderr
- 0578d20c5 Change os.Stderr reassign for Windows service
- 7438c0a7b Merge pull request #7230 from estesp/cp-7206
- 2e236d4fc Merge pull request #7227 from dcantah/cp-hpcstats-test
- 12cae4961 Update Vagrant CI to macos-12
- bc4091aae chore: bump macos runner version
- cb73bd050 Windows HostProcess container CRI stats test
- ac388525a Add validations for Windows HostProcess CRI configs
- d97257190 Merge pull request #7200 from dcantah/1.6-hcsshim-v0.9.4
- 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4
- 6ae451b97 Merge pull request #7217 from estesp/update-fedora
- c9607e78c Update Fedora version to 36
- 1f5ca004e Merge pull request #7170 from AkihiroSuda/riscv64-1.6
- 2952b66c0 CI: add riscv64 builds
- 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64
- 745dc07c4 seccomp: support riscv64
- c2f841f21 Create ppc64le release
- 73b85c0c5 Merge pull request #7171 from AkihiroSuda/cherrypick-6810-1.6
- 0a0a154d6 Merge pull request #7172 from AkihiroSuda/cherrypick-7149-1.6
- 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added
- f3da3e51f allow ptrace(2) by default for kernel >= 4.8
- 604d0bdf5 Merge pull request #7160 from thaJeztah/1.6_update_go
- aa1101068 [release/1.6] update golang to 1.17.12
- 4e92d8e7e Merge pull request #7131 from kzys/backport/1.6/7126
- 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing
- 288440aad Merge pull request #7133 from kzys/backport/1.6/7106
- fa2016d58 [release/1.6] Downgrade MinGW to version 10.2.0
- 6309dc487 Merge pull request #7051 from Iceber/fix-run-controller-manager-1.6
- 99c56d217 ctr: fix label args used in NewContainer
- 3dce36e42 Merge pull request #7045 from kzys/backport/1.6/7022
- 51de785f8 [release/1.6] Make building static binaries simpler
- 9abd4b3f3 Merge pull request #7036 from thaJeztah/1.6_update_runc2
- 2ea4e6348 update runc binary to v1.1.3
- 10c129548 Merge pull request from GHSA-5ffw-gxpp-mxpf
- 61213742a Prepare release notes for v1.6.6
- f92068350 Implicitly discard the input to drain the reader
- 2eb67213b [release/1.6] Limit the response size of ExecSync
- 96df0994f Merge pull request #7021 from dmcgowan/prepare-1.6.5
- 185e87275 Prepare release notes for v1.6.5
- af315d4a4 Merge pull request #7013 from thaJeztah/1.6_bump_golang_1.17.11
- 3691a3b64 Merge pull request #7011 from fuweid/cherry-pick-7009
- 5c9c83d3e [release/1.6] update golang to 1.17.11
- fdcdc27bc update go-cni/for cni update fixing plugins that don't respond with version
- ae3c2ac47 Merge pull request #6985 from AkihiroSuda/cherrypick-6982-1.6
- e33b9e709 archive: add human-readable hint to Lchown error
- feb0d5b17 Merge pull request #6968 from dcantah/gomod-hcsshim-0.9.3
- 856815579 Merge pull request #6980 from AkihiroSuda/cherrypick-6972-1.6
- 3bb5a9d19 config: improve config v1 deprecation message
- 6eff5b6c0 [release/1.6] go.mod: Bump hcsshim to 0.9.3
- 6532af416 Merge pull request #6927 from thaJeztah/1.6_bump_golang_1.17.10
- f1d2d9260 [release/1.6] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
- 9f99be51b [release/1.6] update golang to 1.17.10
- c6e009522 Merge pull request #6929 from ambarve/backport_path_fix
- 9f76550df Merge pull request #6942 from psschwei/release/1.6
- 1bb7d3909 Merge pull request #6936 from thaJeztah/1.6_bump_runc
- 246a1b42e vendor: github.com/opencontainers/runc v1.1.2
- 43717e03a update runc binary to v1.1.2
- 82a77be2d reverts removal of parallel run from critest
- 74c1e96aa Merge pull request #6941 from estesp/backport-vagrant-fix
- 06bdfeb67 Allow git commands in Vagrantfile
- 70839a344 Bug fix for mount path handling
- bee37b011 Merge pull request #6895 from psschwei/release/1.6
- 1520bae0f update critools to v1.24
- 212e8b6fa Merge pull request #6887 from dmcgowan/prepare-1.6.4
- 0d1d2953b Prepare release notes for 1.6.4
- db40e2128 Merge pull request #6878 from thaJeztah/1.6_backport_bump-opencontainers_selinux_to_v1.10.1
- 42d691fe6 Bump opencontainers/selinux from 1.10.0 to 1.10.1
- 6eeeaaddc Merge pull request #6877 from MikeZappa87/update-go-cni-v2
- e9f22e008 Update go-cni to v1.1.5
- 50e24461e Merge pull request #6859 from fuweid/cp-16-6842
- be4909e95 cri: close fifos when container is deleted
- f83086606 Merge pull request #6844 from dmcgowan/prepare-1.6.3
- baa386dc0 Prepare release notes for v1.6.3
- 595e77bba Merge pull request #6853 from kzys/16-backport-6789
- e8da82adc tracing: fix panic on startup when configured
- ec44f6b65 Merge pull request #6816 from dims/RFC-enhance-pull-performance-1.6
- 1764ea9a2 CRI: improve image pulling performance
- 64d2cf44d Merge pull request #6823 from thaJeztah/1.6_backport_bump_golang_1.17.9
- 9cd76d465 [release/1.6] update golang to 1.17.9
- b7bce90eb Merge pull request #6813 from mikebrow/cherrypick-#6806-release-1.6
- c09cc1242 check for duplicate nspath possibilities
- eed3a2a99 Merge pull request #6801 from fuweid/cherry-pick-6772
- fe6ba62ce metrics/cgroups: fix deadlock issue in Add during Collect
- 4f30ddacd Merge pull request #6766 from thaJeztah/1.6_fix_pseudo_version
- 8b81a7843 [release/1.6] go.mod: update image-spec to merge-commit of v1 into main
- 5ff8fce1f Merge pull request #6759 from thaJeztah/1.6_backport_runc_1.1.1
- cd89e29d2 Merge pull request #6752 from AkihiroSuda/rocky-ci-1.6
- f2ba2041b update runc binary to v1.1.1
- b736b4dab go.mod: github.com/opencontainers/runc v1.1.1
- 72f1e58c7 CI: add Rocky Linux 8
- bb8da7abc Merge pull request #6739 from thaJeztah/1.6_bump_imgcrypt
- 7ede40c5c [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4
- 264371e06 Merge pull request #6728 from thaJeztah/1.6_backport_update_go_cni_to_v1.1.4
- bee69923e Merge pull request #6732 from thaJeztah/1.6_backport_update_prom_dep
- 5a760443c Merge pull request #6731 from thaJeztah/1.6_backport_xfs
- de12f3717 Merge pull request #6730 from thaJeztah/1.6_backport_improve_container_mount
- ddbe66cac Merge pull request #6727 from thaJeztah/1.6_backport_snapshot_deadlocks
- fc14cfddd Merge pull request #6734 from AkihiroSuda/cherrypick-6323-1.6
- 5538be6cf cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events
- da35c19da Test turning off golang CI lint cache
- de8046a55 Merge pull request #6725 from dmcgowan/prepare-v1.6.2
- a0213573b Add nolint:staticcheck to platform-specific calls
- ad0036ed6 Update prometheus client vendor
- c7bbf316f Mount devmapper xfs file system with "nouuid" option.
- a1de89c3e Make the temp mount as ready only in container WithVolumes
- 82a12edf2 moving up to go-cni v1.1.4
- 28b44826b native: fix deadlock from leaving transactions open
- 8461dd6e5 Prepare release notes for v1.6.2
- 91800c4e9 Add static checks to shim for Windows
- 8a36855c6 Merge pull request #6724 from dmcgowan/1.6-update-go-mod
- ca51d7f85 Update go.mod go version
- 82c43268f Merge pull request #6717 from thaJeztah/1.6_remove_empty_mod
- 765df6609 [release/1.6] remove empty go mod to allow building for go 1.18
- 921cf570e Merge pull request from GHSA-c9cp-9c75-9v8c
- e9af80859 Fix the Inheritable capability defaults.
- 104824c3d Merge pull request #6673 from estesp/cp-6569
- 7c929318a Update TestNormalize to only test Windows
- 7c9082e97 Merge pull request #6675 from estesp/cp-6666
- 06985e7d0 Upgrade golangci-lint and its GitHub Action
- d12516713 Merge pull request #6623 from kzys/fix-6611
- b13d3e05c cri: relax test for system without hugetlb
- ff6a78445 Merge pull request #6620 from thaJeztah/1.6_backport_bump_go_1.17.8
- b325d5647 update to go 1.16.15, 1.17.8 to address CVE-2022-24921
- 10f428dac Merge pull request #6607 from dmcgowan/prepare-v1.6.1
- 787b4671d Prepare release notes for v1.6.1
- 075cfdff6 Merge pull request from GHSA-crp2-qrr5-8pq7
- 7078e50e2 Merge pull request #6572 from fuweid/cp-1.6-6452-6571
- 444eba43d containerd-shim-runc-v1: return init pid when clean dead shim
- 37bb915c6 containerd-shim-runc-v2: return init pid when clean dead shim
- 9f316fa4b Use fs.RootPath when mounting volumes
- 39259a8f3 Merge pull request #6531 from dmcgowan/prepare-v1.6.0
- 8713c0472 Prepare release notes for v1.6.0
- b73979f11 Merge pull request #6555 from thaJeztah/bump_go_1.17.7
- f261498e0 Update Go to 1.16.14, 1.17.7
- de8c9651b Merge pull request #6533 from a2ush/modify-cri-architecture-doc
- 7efd485b6 Merge pull request #6543 from dmcgowan/update-cni-v1.1.2
- fa19714db Update go-cni to v1.1.3
- e0fc9fe44 Merge pull request #6544 from bobbypage/cloudinit
- 6e3cc28a6 Wait for containerd installation in GCE scripts
- c0f818846 Update go-cni to v1.1.2
- a7f43c892 Merge pull request #6540 from gabriel-samfira/enable-tests-on-windows
- e2c5f8f93 Merge pull request #6500 from NickJackolson/nickjackolson/docupdate
- dea7ae27a Add instructions on using go with admin perms
- 4f0d5f0ee Enable TestContainerPTY and TestContainerUsername
- 0340e84cd Merge pull request #6537 from dmcgowan/prepare-v1.6.0-rc.4
- 732103271 Change the context to avoid misunderstandings
- 6827eec7a Prepare release notes for v1.6.0-rc.4
- eb011d127 Merge pull request #6536 from mxpv/runtime-name
- b0623a06e Change file name for shim binary path
- e8a5a5443 Merge pull request #6532 from egernst/image-param-for-ctr-stress
- a9f61ba2c Merge pull request #6524 from dmcgowan/prepare-1.6.0-rc.3
- 1a3efb5cd Merge pull request #6529 from Gorgonx7/dark-light-mode-logo
- daaf031e2 Use white logo in github dark mode
- efc6ca4c4 Prepare release notes for v1.6.0-rc.3
- 6a628b64a Merge pull request #6514 from marquiz/fixes/rdt
- 33b7f779a Merge pull request #6504 from jepio/jepio/pkg-oom-v2-quiet-shutdown
- d1c3b751c Merge pull request #6523 from fuweid/fix-6484
- 2a588a619 Merge pull request #6518 from egernst/ctr-stress-exec-fixup
- 7e821fb61 fix: .dockerignore makes git working tree dirty
- ac2692d30 containerd-stress: introduce option for specifying image
- 8b9571e34 containerd-stress: start task ctr before starting execs
- 9b1fb8258 cri: fix handling of ignore_rdt_not_enabled_errors config option
- 4f5ce5615 Merge pull request #6501 from henry118/issue6499
- a5d093991 Merge pull request #6510 from smira/adoption-talos
- dcbe3e471 docs: add Talos Linux to the list of adopters
- 943ca856a Merge pull request #6502 from dmcgowan/prepare-1.6.0-rc.2
- 821c961c8 pkg/oom/v2: handle EventChan routine shutdown quietly
- 2d9d5fddb Document fs_type and fs_options in snapshots/devmapper/README.md
- 604c462d7 Merge pull request #6497 from thaJeztah/platform_keep_osversion_osfeatures
- 9a08d6fcd Merge pull request #6457 from kzys/otel-http
- a31e28e2c Prepare release notes for v1.6.0-rc.2
- 8944c12f5 Update releases document
- 75d594834 Merge pull request #6498 from dmcgowan/update-cgroups-1_0_3
- d6a576ae6 Merge pull request #6494 from AkihiroSuda/seccomp-5.16
- 05177ab5c Merge pull request #6243 from ktock/pusher-abort
- 8d69c041c Update cgroups to v1.0.3
- bec6e4dd6 platforms.Normalize(): do not reset OSVersion and OSFeatures
- 34f717349 seccomp: kernel 5.16 (futex_waitv)
- 8632bdcb7 seccomp: kernel 5.15 (process_mrelease)
- c013db696 seccomp: kernel 5.14 (quotactl_fd, memfd_secret)
- 17a2831f7 seccomp: kernel 5.13 (landlock_{add_rule,create_ruleset,restrict_self})
- 1329ea371 seccomp: kernel 5.12 (mount_setattr)
- 52b8ca554 Merge pull request #6411 from nmeum/swapcontext
- c2cb58922 Merge pull request #6478 from fuweid/enhance-no-sync-during-create
- e178d831e Merge pull request #6475 from estesp/import-correct-media-type
- 82af36e59 Merge pull request #5828 from cpuguy83/shimv2_exit_on_signals
- cc59ae4d9 tracing: return (ctx, span) from StartSpan
- e751f1f44 tracing: support OTLP/HTTP in addition to gRPC
- 9c676e98d Merge pull request #6481 from Junnplus/acr-400
- 813a061fe oci: use readonly mount to read user/group info
- a43703fcb Merge pull request #6455 from tonistiigi/amd64-variants
- c0e00f19a fix acr fetch token 400
- 3f5d789df Merge pull request #6476 from gabriel-samfira/various-periodic-fixes
- 4cd9f37f5 Fix windows periodic workflow
- 4aff7431f Fix possibly incorrect media type default on import
- 3ffb6a611 shimv2: handle sigint/sigterm
- 2986d5b07 Merge pull request #6473 from kzys/gc-docs
- f048a2593 docs: add doc-comments on GC-related methods
- 731518417 Merge pull request #6465 from fuweid/fix-issue-6429
- 31a710c49 fix: should not send 137 code event if cmd is notfound
- ab8d99cf4 Merge pull request #6463 from Junnplus/empty-scope
- 936faf9c9 fix empty scopes return
- ad771115b Merge pull request #6462 from dmcgowan/prepare-1.6.0-rc.1
- 62f6c8175 Merge pull request #6424 from cpuguy83/nondist-blob-push
- c1e17d8ba Prepare release notes for v1.6.0-rc.1
- 60703af9f Merge pull request #6461 from dmcgowan/ci-compile-go-1.16
- a37209766 Merge pull request #6432 from dmcgowan/fix-introspection-service
- f2c2d0768 Merge pull request #6458 from dcantah/change-to-constant-win2022
- 4f552b077 Compile binaries for go1.16 and go1.17 in CI
- 762b01896 Merge pull request #6460 from dmcgowan/update-kubernetes-vendors-0.22
- 7d7064e6b Integration: Change to Windows Server 2022 build number constant
- 13b804c10 Merge pull request #6459 from dmcgowan/fix-rdt-build-tags
- 2898004a5 Update kubernetes vendor to 0.22.5
- 5089b1210 Merge pull request #6439 from dmcgowan/remove-submodule-go-mod
- 4e9e14c2b Fix rdt build tags for go 1.16
- 778da8bae Merge pull request #6453 from dcantah/bump-hcsshim-0.9.2
- f0afdea2a Merge pull request #6375 from AkihiroSuda/runc-1.1.0
- af83e9af1 platforms: add support for matching amd64 variants
- af39d2ad7 go.mod: Update hcsshim to v0.9.2
- fcb7bd699 Remove api go submodule
- 46312f4a1 Update makefile to remove API submodule
- fd35ca235 Merge pull request #6443 from kzys/otel-fix
- 2b8386e0d Merge pull request #6386 from kzys/codeql-pr
- 297115dd3 Merge pull request #6445 from cpuguy83/disable-client-trace
- 6eff8392c Merge pull request #6451 from ningmingxiao/dev7
- ed0828bb6 delete useless code
- 21a748e38 go.mod: github.com/opencontainers/runc v1.1.0
- dba897c35 update runc binary to v1.1.0
- d5e8edf2d Do not automatically inject client traces
- 140ecc924 Merge pull request #6440 from IRCody/revert_shared_namespace
- 69ae95531 tracing: fix OTLP tracer's initialization
- 8dd36423b Revert "Add shared content label to namespaces"
- c3177caf0 Merge pull request #6435 from alunsin/dev/build-image-for-ppc64le
- 2311f1e5f Merge pull request #6427 from lining2020x/main
- 6e211a774 Merge pull request #6431 from dmcgowan/prepare-1.6.0-rc.0
- a1ba38056 Update caching logic to avoid map access
- ce3871966 services/introspection: support to show introspection grpc service
- 30a60663f Merge pull request #6397 from aznashwan/windows-integration-gcloud-auth-action
- a018ae3f6 Prepare release notes for v1.6.0-rc.0
- 919797163 Integration: Switch to `upload-cloud-storage` Gcloud action.
- 8a2b61356 Integration: Switch to using `auth` Gcloud action in Windows workflow.
- bce18cb04 Merge pull request #6426 from ningmingxiao/dev6
- c0a31a7a4 Add ppc64 support for test images
- a303d552a ctr: Unify the delete subcommand alias
- b35fb7d44 remove io/ioutil
- d05194f0a ctr: flag to toggle non-distributable blob push
- f77989036 Add image handler to skip non-distributable blobs.
- 8c194d8f3 gha: run CodeQL scan on pull requests
- 62a4e7020 Merge pull request #6418 from bobbypage/cgroupv2-cos-fix
- 4cbd366f9 Merge pull request #6378 from aznashwan/windows-integration-enable-2022
- f99e92359 Enable critest tests on Windows Server 2022.
- 55b89eabf Parametrize CRITest test images in Windows Periodic workflow.
- 35b96f9b1 Merge pull request #6415 from dmcgowan/contrib-apparmor-cleanup
- e4bf68633 Merge pull request #6419 from sachaos/feature/fix-wrong-log-message
- 18592b2f5 Fix wrong log message
- bdc852190 test: e2e node COS cgroupv2 script
- ee326447e Merge pull request #6414 from dmcgowan/followup-errors-change
- 468513820 Merge pull request #6351 from adisky/update-k/k-1.23
- 9028832e4 Merge pull request #6416 from marosset/adopters-azure
- e38946d86 Updating adoption of containerd for AKS
- c124253e0 Merge pull request #6413 from SergeyKanzhelev/patch-1
- 647308bc4 Merge pull request #6410 from AkihiroSuda/update-go-mod-20220107
- 8aca314dd Update error message for apparmor parser
- 48c7529de Fix incorrect error wrapped when closing ingest file
- 0c2c289d4 Fix seek error used without nil check
- 8816006d1 Fix followup items from errors replacement
- 77d53d2d2 Merge pull request #6366 from jonyhy96/feat-errors-replace
- a94f32ce0 update the adoption status of containerd in GKE
- adee2c797 seccomp: add support for "swapcontext" syscall in default policy
- 72d2913c8 Merge pull request #6412 from jklippel/correct-link-in-documentation
- 4f0f36350 corrected link in cri architecture documentation
- d3724a6c1 go.mod: update github.com/containerd/{continuity,go-cni,imgcrypt}
- bbe46b8c4 feat: replace github.com/pkg/errors to errors
- 3ccd43c8f Merge pull request #6396 from AkihiroSuda/refresh-token
- 857b35de6 Merge pull request #6407 from dmcgowan/prepare-1.6.0-beta.5
- e43d4206a Update k/k to 1.23.0
- 8d5af6be8 Prepare release notes for v1.6.0-beta.5
- 1b8af3752 Merge pull request #6292 from aznashwan/windows-integration-conditional-artefact-upload
- 644a01e13 Merge pull request from GHSA-mvff-h3cj-wj9c
- 893701220 Merge pull request #5439 from marquiz/devel/rdt
- 9c2e3835f cri: add ignore_rdt_not_enabled_errors config option
- eba104816 Update dependencies
- f4a191917 cri: annotations for controlling RDT class
- eae14688c tasks: add Linux rdt support
- 9e755d12e cmd: add --rdt-class command line option
- 2946db890 oci: implement WithRdt
- 4045b7ce8 Merge pull request #6391 from jonyhy96/fix-placeholder
- fcf956a9e Merge pull request #6403 from tklauser/timespec-unix
- 07aa42f42 Merge pull request #6207 from marquiz/devel/docs
- bf60e2d17 Merge pull request #6304 from lippertmarkus/fix-ctr-cni-windows
- df21828d2 content/local: use syscall.Timespec.Unix
- ff7fd4eb2 Merge pull request #6394 from dcantah/fix-makefile
- 3ab676ce2 Merge pull request #6395 from jonyhy96/fix-abstract
- 85326d76f fix: only test abstract unix socket on linux
- 90426378e Integration: Check GCP secrets on Windows CI artifact upload.
- 97623ab0c remotes/docker: allow fetching "refresh token" (aka "identity token")
- 1a078e689 Merge pull request #6390 from gabriel-samfira/fix-restart-container-test
- 8094f50dd remotes/docker/config: allow setting custom AuthorizerOpts
- 8e6afaa20 Fix $(PWD) issue for Windows makefile
- 653b8b02a Expect ErrorNotFound on Windows after Kill()
- ac8129706 fix: use _ for consistency
- f39b3ac7e fix(ctr): enable networking for Windows containers
- 653f2f1ce Merge pull request #6291 from ningmingxiao/dev1
- 3ae95e78a Merge pull request #6384 from dcantah/fix-nodaemon
- 0ff87a892 Replace tskill with taskkill
- fd07b0368 Merge pull request #6122 from alakesh/ext4_lazy
- f41e5c7e1 Merge pull request #6385 from gabriel-samfira/fix-list-stats-flake
- e0a433abf Merge pull request #6347 from gabriel-samfira/fix-windows-test-setup
- aadae6d50 Fix flakiness on Windows for list stats
- d53c43133 Fix no-daemon flag for integration/client tests
- b93119501 Merge pull request #6383 from kzys/otel-upgrade
- 5c2edeffb Upgrade k8s.io/klog/v2 from 2.9.0 to 2.20.0
- 2ee3ce510 Use insecure.NewCredentials instead of grpc.WithInsecure
- 2fb739aa2 Upgrade OpenTelemetry dependencies
- 28ffedd06 Merge pull request #6322 from dcantah/fix-makefile-windows
- 34c4abc34 Fix default makefile target for windows
- e6dd97d9d Merge pull request #6379 from dcantah/disable-TestContainerHook-Windows
- 2c9d80aba Merge pull request #6372 from fidencio/wip/seutil-fix-container_kvm_t-type-detection
- 78ad7a2d3 cri-integration: Add Windows default paths
- abcf7c2f6 Disable TestContainerHook on Windows
- 3c3486f91 Merge pull request #6350 from aznashwan/windows-integration-disable-2004
- 89437597a Merge pull request #6308 from thaJeztah/rootless_devices
- 949db5721 Merge pull request #6320 from endocrimes/dani/cri-swap
- 0def0dbec Merge pull request #6275 from gabriel-samfira/enable-volume-ownership-test
- d0da25cf5 Merge pull request #6296 from dmcgowan/prepare-1.6.0-beta.4
- 330961c2d Merge pull request #6358 from jonyhy96/feat-error
- d47fa40d1 Merge pull request #6021 from dmcgowan/runc-shim-plugin
- ac531108a Merge pull request #6155 from egernst/cri-update-for-sandbox-sizing
- 7d268f712 Merge pull request #6354 from kzys/ns-snapshot
- f1c799331 seutil: Fix setting the "container_kvm_t" label
- 5bd38c6a1 Merge pull request #6373 from minbaev/add-list-stat
- c8a009d18 add-list-stat: return container list if filter is nil
- d977f77a5 Merge pull request #6369 from fuweid/fix_test_case
- f83ab813d Use task plugin for runc shim
- 04e57d71b Seperate shim manager and task service
- 44b28b61f medatada: make namespaces' deletion error less cryptic
- 20419feaa cri, sandbox: pass sandbox resource details if available, applicable
- 6e9e75955 Merge pull request #6225 from jonyhy96/feat-blot-open-timeout
- 9e9ee66bf integration: deflake TestContainerdRestart
- dd26d3d09 feat: support custom timeout for blot open
- c0d07094b feat: Errorf usage
- 7fa44fc98 Merge pull request #6333 from thaJeztah/bump_go_1.17.4
- 0e472420b Update Go to 1.17.5
- 569042e6d Prepare release notes for v1.6.0-beta.4
- 4236f6b22 Merge pull request #6332 from thaJeztah/consistent_import_alias
- 1057ed385 Merge pull request #6364 from dmcgowan/disable-restart-monitor-test-windows
- 552a27081 Disable restart monitor test in Windows
- a95a8b8ff Merge pull request #6338 from kzys/windows-fail-fast
- b7f673790 OCI: Mount (accessible) host devices in privileged rootless containers
- 7f70ff967 oci.getDevices(): move "non-dir, non '/dev/console'" case into switch
- 95b83fa54 Merge pull request #6355 from dmcgowan/integration-client-restart-daemon-output
- 2c96d5b06 Run windows parallel integration test as short
- 807213fd3 Update restart monitor test to output daemon logs on failure
- 26d356d09 Merge pull request #6263 from thaJeztah/bump_oci_specs
- 9b0303913 only relabel cri managed host mounts
- 90cdc6c9a images/converter: remove deprecated types
- fc8138468 go.mod: update image-spec to latest (v1.0.3-dev)
- 2d3009038 cri/server: use consistent alias for pkg/ioutil
- a04656c1d Merge pull request #6353 from mxpv/gids
- f9cfadcdd Merge pull request #6303 from jsturtevant/fix-rg-timestamp
- dc13bcd51 Enable lazy init for ext4 with devicemapper
- 68dabdcc6 Use RFC3339 format so rg cleanup works
- 6f9d80907 Remove Windows integration testing for 2004.
- 77a321a07 Replace find with native Go code
- 22dc60e05 Enable TestVolumeOwnership on Windows
- 441bcb56d Skip WithAdditionalGIDs on Darwin
- 4c1e26cd5 Don't fail-fast on Windows integration tests
- 753f95e23 Merge pull request #6330 from AkihiroSuda/runc-1.0.3
- 1c32c00fe Merge pull request #6329 from mxpv/mac
- c9d1e155c go.mod: github.com/opencontainers/runc v1.0.3
- 44995d483 update runc binary to v1.0.3
- 416899fc8 Allow native snapshotter on Darwin
- 292b0c156 Merge pull request #6328 from kzys/go-install
- 4af023480 Merge pull request #6326 from mxpv/builtins
- 6b0e2414c Do not use `go get` to install executables
- d2f1dda0f Include runtime v2 in default builtins
- d06bce4d3 Merge pull request #6314 from dcantah/ws2022-ci
- d74245308 Merge pull request #6324 from gabriel-samfira/set-explicit-acl
- 2c1f51781 Merge pull request #6311 from thaJeztah/update_test_image
- 072177796 Merge pull request #6325 from gabriel-samfira/set-containerd-root
- e0e605cf3 Merge pull request #6312 from thaJeztah/export_DeviceFromPath
- 392f604eb Use a single RUN command
- 533dd1c0e fixup: check for swap accounting
- f33d38c7c integration: align tags of test images
- c5b0a18b6 fixup: handle diff between cgroupsv1 and v2
- 9cc0d1f07 Set explicit ACL on test files
- 4ccf287da Set CONTAINERD_ROOT in Windows cri-integration
- 106086d65 Merge pull request #6321 from gabriel-samfira/update-volume-test-images
- ff77dd112 Add Windows Server 2022 CI runs
- fd0850e9e Update continuity dependency
- ff9d7aef3 Update volume test images
- 08812f3fb Merge pull request #6201 from dmcgowan/test-restart-monitor-check-timestamp
- 2fa4e9c0e cri: add support for configuring swap
- 8063fdab0 Merge pull request #6319 from dmcgowan/update-windows-integration-image-to-ghcr
- bae0d88ae Add error logging on cleanup
- d43a90b98 Merge pull request #6301 from mxpv/migration
- 6bccd67e8 Revert shim plugin migration
- 665877a5b Move volume images from gcr to ghcr
- 2190192b5 Merge pull request #6317 from gabriel-samfira/add-github-packages-login
- 323a62d7b Add permissions
- f3195b3b5 export oci.DeviceFromPath()
- 16c233b6d Merge pull request #6306 from thaJeztah/update_oci_getdevices
- c6d26f0d3 Authenticate against ghcr.io
- 30d8dccd3 Merge pull request #6315 from dcantah/skip-multilayertest-windows
- 2a6857d06 Skip TestExportAndImportMultiLayer on Windows
- 6ff1a5934 fix when kernel version < 4.13rc1 by using index=off cause overlay test error
- 94462d8f5 oci/deviceFromPath(): correctly check device types
- 591d7097e Merge pull request #6290 from gabriel-samfira/add-test-image-build-action
- f419d4a0a Merge pull request #6286 from aznashwan/windows-integration-separate-trigger
- 3d1c85d95 Merge pull request #6274 from gabriel-samfira/build-image-on-windows
- 2a36dcdda Merge pull request #6297 from adisky/patch-2
- 7a4415dd5 Add VMware TKG & TCE to Containerd adopters
- 8757b92c7 Merge pull request #6293 from AkihiroSuda/fedora35
- 1fe214c22 Merge pull request #6269 from estesp/test-ci-readme
- 46892d340 Vagrantfile: update to Fedora 35
- 2877865a9 Merge pull request #6278 from mxpv/resolve
- 9e7910ebd Merge pull request #6271 from fuweid/move_stdout_to_stderr
- 0d720ff9c Merge pull request #6289 from ManaSugi/add-ctr-caps
- 7cfccdbad Merge pull request #6270 from fuweid/enhance_test_case
- 8de1117c9 integration: add stats result in error message
- 6681cc4b9 ctr/snapshots/diff: don't show the media-type in output
- a97564411 remotes: fix dockerPusher to handle abort correctly
- 1698d061c Build volume test images on Windows
- 7ccd733d2 Add image build workflow
- 95b3ab2a4 ctr: Add Linux Capabilities control flags
- ff1a105d7 Merge pull request #6287 from samuelkarp/1.4-extended-docs
- 3d318b3bb docs: mark 1.4 as Extended
- 9a994877c docs: fix RELEASES.md gRPC API anchor
- 0a25bc1aa Integration: Separate Windows Periodic Tests workflow trigger.
- 0a284fcdb Merge pull request #6284 from jonyhy96/feat-ci-skip-fork
- 507bfc91b feat: skip ci for fork
- cf6f19cea Merge pull request #6280 from wzshiming/fix/close-with-seek-fail
- 72384a653 Merge pull request #6268 from aznashwan/windows-ci-autodetect-az-cli
- 9dfbcbbc4 content/local: Close the file if Seek fails
- 5015130f7 Fix executable file not found when restoring shims
- 51e60404a Merge pull request #6276 from sachaos/feature/fix-wrong-document-about-make-install-deps
- 2b28dd363 Fix wrong make target on documentation
- cb1359fa8 Integration: Remove explicit version passing to `azure/CLI`.
- b6b8facf1 Merge pull request #6272 from jonyhy96/fix-error-return
- fa6759ae5 fix: server error return
- 1a88cf524 Merge pull request #6267 from dmcgowan/prepare-v1.6.0-beta.3
- 5e4b033ec Update README.md repo->org
- db9c6fc72 Merge pull request #6254 from jonyhy96/feat-support-callopts
- 69822aa93 Merge pull request #6258 from wllenyj/fix-registry-panic
- 5f293d9ac [CRI] Fix panic when registry.mirrors use localhost
- af93ea7f1 Merge pull request #6241 from jterry75/main
- 674b94c42 Prepare release notes for v1.6.0-beta.3
- f5863e22f Update API version in go.mod
- 5df9ec366 Update release name to use consistent format
- aa2733c20 Merge pull request #6170 from olljanat/default-sysctls
- f8d734e40 fix: make max recv/send msg size setting default
- a776a27af Merge pull request from GHSA-5j5w-g665-5m35
- 9afc778b7 Merge pull request #6111 from crosbymichael/latency-metrics
- 63895de45 Add support for TMP override on toml
- 4aea5da85 Merge pull request #6255 from aznashwan/generalize-windows-ci-setup-user
- 7758cdc09 Merge pull request #6253 from jonyhy96/feat-rwmutex
- 444ef2f6d Generalize Windows CI setup script for any user.
- 3d6bfa3f5 Standardize cmdlet capitalization in Windows CI scripts.
- 6835a9470 Split runc shim into plugin components
- 6eea8f3f6 Add shutdown package
- 547040cd5 feat:support custom callopts on client side
- bef792b96 feat: use rwmutex instead
- d055487b0 Merge pull request #6206 from mxpv/path
- 77e76d7a5 Merge pull request #6246 from wzshiming/fix/close-file-with-modify-perm
- eee8c969d Merge pull request #6250 from cpuguy83/fix_release_tar_name
- 2f31dcda7 release: change tar name to match prior releases
- 70c88f507 schema1: reject ambiguous documents
- eb9ba7ed8 images: validate document type before unmarshal
- 2a81c9f67 CRI: Support enable_unprivileged_icmp and enable_unprivileged_ports options
- db124c560 Close file if permission modification fails
- 5b09dc5eb Merge pull request #6237 from cpuguy83/fix_wrong_restore_error
- aa1b07361 Merge pull request #6221 from ktock/urls-fallback
- 526defb57 Fix containerd fails to pull OCI image with non-`http(s)://` urls
- 89eebc4c0 Fix wrong error returned for image index lookup
- bd81f8a39 Merge pull request #6223 from dmcgowan/v1.6.0-beta.2
- bd30398f4 Merge pull request #6196 from cpuguy83/add_arm64_release
- be84932e1 Rename release dockerfile to omit distro name
- 28126fd60 release: improve dockerfile
- 27d7c5038 Add arm64 to releases
- 7ad570964 Merge pull request #6236 from crosbymichael/cri-panic
- 6765524b7 use write lock when updating container stats
- 9093c1c69 Merge pull request #6230 from dcantah/update-hcsshim-0.9.1
- b103bee4c go.mod: Bump hcsshim to v0.9.1
- e17fe37e0 Fix package alias
- 60c55c80f Merge pull request #6228 from dcantah/update-ttrpc-1.1.0
- 920b24793 go.mod: Bump ttrpc to 1.1.0
- 6870f3b1b Support custom runtime path when launching tasks
- 91bbaf679 [cri] add sandbox and container latency metrics
- 195def141 Merge pull request #6213 from thaJeztah/bump_moby_sys
- 4b7cc560b Merge pull request #6222 from jonyhy96/add-more-description
- a3b756ce1 Prepare release notes for v1.6.0-beta.2
- 574800633 cleanup: add more description on comment
- 432ddecaa Merge pull request #6211 from thaJeztah/bump_go_1.17.3
- 76a63427e Merge pull request #6214 from AkihiroSuda/crun-1.3
- a22346622 CI: bump up crun: 1.0 -> 1.3
- 97073c943 go.mod: github.com/moby/sys/mountinfo v0.5.0
- 19d9d0d2a go.mod: github.com/moby/sys/signal v0.6.0
- 9c455ded6 go.mod: github.com/moby/sys/symlink v0.2.0
- fa12f4e69 go.mod: golang.org/x/sys v0.0.0-20211025201205-69cdffdb9359
- 869ccc01c Update Go to 1.17.3
- d41866088 Merge pull request #6205 from gabriel-samfira/pin-azcli-version
- 3196e65f5 docs: document the runtime shim plugin config options
- 0d8e07681 docs: use proper markdown lists in containerd-config.toml.5.md
- 54c0cdae6 Update TestRestartMonitor expected time check
- d4f4c1380 Add runtime path in CreateTaskRequest
- b5b83e051 Merge pull request #5918 from mxpv/shim-manager
- 548579d0e Pin az CLI version
- bfc714d3a Merge pull request #6113 from bobbypage/cri-stats
- 2e6d5709e Implement CRI container and pods stats
- b69bbe25a Vendor latest k8s.io/cri-api and netlink
- 1e36eaf11 Merge pull request #6200 from bobbypage/restart_integration_test
- fd07d74d6 Merge pull request #6179 from claudiubelu/integration/enable-test-runtime-handler
- 9bfec3980 test: Add grace period for restart monitor test
- 0478e04ae Merge pull request #6171 from EGuesnet/Dockerfile_mkdir
- 702071964 Merge pull request #6189 from fuweid/followup-6166
- d022fbe78 Address PR comments
- 82cb0a63e Add mkdir on Dockerfile
- 11ed34067 Merge pull request #6184 from mikebrow/network-setup-logging
- 27e3dba36 Merge pull request #6176 from ktock/converter-hook
- cc5a4c829 Merge pull request #6177 from dkkb/feature/zstd_with_skippable_frame
- 6fa1bb4a5 Fix build after rebase
- 2cec3a34b Migrate task directory
- 8b788d9df Expose shim process interface
- 733519677 Fix after rebase
- df8c206a9 Cleanup shim loading
- b554b577b Move shim restore to a separate file
- a3d298193 Fix backward compatibility with old task shims
- 33786ee4d Add plugin dependency between shim and shim services
- fb5f6ce3c Rework task create and cleanup flow
- 7c4ead285 Add task manager
- 2d5d3541e Rename task manager to shim manager
- ea8978810 adds additional debug out to timebox cni setup
- c8e88447a Merge pull request #6182 from claudiubelu/integration/windows-test-volume-copy-up
- 6fa9f22fa compression: support zstd with skippable frame
- f0d3ea96c converter: Allow hooks during image conversion
- 6ee8577e5 sys/reaper: avoid leaky goroutine when exec timeout
- d0bdb0b65 Merge pull request #6121 from claudiubelu/integration/enables-windows-tests-part-2
- d97b40c30 Merge pull request #6085 from claudiubelu/integration/enables-windows-tests
- dc869b785 Merge pull request #6125 from xens/update_doc_to_v2
- 185c0fb94 Merge pull request #6166 from botieking98/fix-wait-block
- 0800b45dd Merge pull request #6145 from tonistiigi/content-close-fix
- 64f7abd69 Merge pull request #6165 from jmacelroy/main
- 88fc5cf2d Adding scope tests for ParseAuthHeader
- 720781830 Merge pull request #6167 from claudiubelu/update-go-cni
- 3e51312a6 fix shim reaper wait command execute blocked
- aa65faebd Merge pull request #6159 from claudiubelu/commands/tasks-metrics-windows
- 7438edc7e Adding tests for GenerateTokenOptions
- 9b4a6f129 Generate token options with each scope as a separate string.
- 0d0fb6858 Merge pull request #6149 from ukontainer/vendor-moby-sys
- b8f3ebb03 vendor: update moby/sys for darwin support
- 45c529870 Merge pull request #6144 from dmcgowan/prepare-v1.6.0-beta.1
- 0ccc386c8 Prepare release notes for v1.6.0-beta.1
- e5fc3b38e Update mailmap
- 37720fc6f Update api vendor
- fc5c51d5f Merge pull request #6136 from zouyee/cni100
- a217b5ac8 bump CNI to spec v1.0.0
- 010a9e2bc content: close stream after commit request
- 006b44181 Merge pull request #5992 from cpuguy83/client_otel_trace
- ebc5cf19a feat(doc): update to version 2 syntax
- 294143bf3 Inject otel traces to grpc client.
- 51de1d3a4 Merge pull request #6142 from AkihiroSuda/client-expose-image-platform
- cd2f2b0af client: expose (*image).platform
- ac5790c8e Merge pull request #6128 from xens/feat/doc_sched_core
- 3f26fd22e Merge pull request #6130 from cpuguy83/inject-ns-to-rpc
- f44d4cf8c Merge pull request #6109 from timchenxiaoyu/githubdev
- 9c488e5da Merge pull request #6124 from samj1912/large-labels
- 535191abf fix #6054  MaxConcurrentDownloads is not effect when Unpack is true
- 59ca4bfd7 Merge pull request #6132 from dcantah/wcow-snapshotter-spelling
- 3b73922fb feat(doc): add Core Scheduling documentation
- c18c2e735 Fix spelling mistake in Windows snapshotter
- 4da5d94da Merge pull request #6126 from claudiubelu/cleanup-wcow-layers
- 130a9c7dd Ensure namespace is proxied to grpc/ttrpc plugins
- 2a8dac12a Output a warning for label image labels instead of erroring
- 10d9d1a60 Merge pull request #6118 from zouyee/ioutil
- 602018900 integration: Enable some tests for Windows
- 1f1cad391 io/ioutil package has been deprecated in Go 1.16 that replaces io/ioutil functions
- 085572537 Merge pull request #6115 from zouyee/utest
- 3f417d61e Merge pull request #5778 from claudiubelu/windows/adds-resource-limits
- 46be06937 close Writer after use which may leak mem
- 5b29542cb Merge pull request #6098 from dmcgowan/prepare-1.6.0-beta.0
- 37e9efbe6 Merge pull request #6105 from dmcgowan/test-add-error-testcontainerdrestart
- 2e3c8d5e6 Merge pull request #6110 from rgl/rgl-new-container-doc-typo
- 1abe50512 Prepare release notes for v1.6.0-beta.0
- c5947557d Add error message to in TestContainerdRestart integration test
- 6927fc327 Merge pull request #6104 from dmcgowan/update-cgroups
- 072a7074b Fix typo in the NewContainer function documentation
- 193bafc42 Merge pull request #6100 from jonyhy96/cleanup-test
- ac2df3ba9 test: check file content after mount
- 18d483b23 Update cgroups to v1.0.2
- a4663097e Merge pull request #6107 from estesp/test-timeout
- 4ed3c524c Update test timeout based on recent cancellations
- 3f033aeff Merge pull request #6106 from dmcgowan/test-cri-teardown-check-pid
- d252a293d Remove extra test_teardown
- 4a569c889 Check the pid in cri test teardown
- cb6fb93af Merge pull request #6011 from crosbymichael/schedcore
- 60ffa3ff7 Merge pull request #5579 from claudiubelu/integration/restart-containerd
- c01ebe7cf Merge pull request #6099 from dcantah/update-hcsshim-0.9
- 26ee1b1ee Merge pull request #4695 from crosbymichael/cri-class
- f1054dbbd fix integration client vendor
- e48bbe839 add runc shim support for sched core
- 88e1cf5fb Merge pull request #6102 from thaJeztah/bump_go_1.17.2
- de1a39bf3 Update Go to 1.17.2
- 46b152f81 vendor: Bump hcsshim to 0.9.0
- fb4432c24 integration: Enables TestVolumeCopyUp for Windows
- 0ba3532f5 integration: Enables TestRuntimeHandler for Windows
- e648fa2e8 Merge pull request #5933 from claudiubelu/integration/import-multilayer
- 2d48b6a86 Merge pull request #6031 from fuweid/carry-5648
- 7b8a697f2 Merge pull request #6034 from claudiubelu/windows/fixes-image-volume
- 830b3c26e integration: Enable some tests for Windows (part 2)
- 228265688 Merge pull request #6094 from zouyee/go117
- 3a713811b run `gofmt` with Go 1.17
- 7b2a5f1c0 Merge pull request #6088 from AkihiroSuda/pkg-cap-fix-comment
- 6e5ce1486 Merge pull request #6066 from cpuguy83/fix_tracing_attrs_usage
- 96018b7db vendor: Updates go-cni
- 703b86533 pkg/cap: remove an outdated comment
- 1ee2bff0e Update go otel 1.0.1
- 79e35892c Merge pull request #6086 from estesp/add-adopters
- 97e201640 Merge pull request #6082 from Dragoncell/cgroupv2_fix
- b9a0c5080 modify the way for checking cos
- c528d2c39 Update ADOPTERS.md with additional uses
- 5b222d54a commands: Enables task metrics for Windows
- d193dc2b8 Merge pull request #5915 from AdamKorcz/fuzz12
- 4acb18c95 Merge pull request #6081 from adelina-t/fix_tests
- 3f00006f7 Merge pull request from GHSA-c2h3-6mxw-7mvq
- 9734b4039 Pin mingw to version 10.2.0
- d19af5afb Update to golang 1.17.1
- 3cb0ec01e Install nssm
- 64291df71 Merge pull request #6079 from cpuguy83/correct_task_error
- 63b7e5771 Merge pull request #5973 from Juneezee/deprecate-ioutil
- 02e77bcdc task service: return known error type
- 791e175c7 Windows: Fixes Windows containers with image volumes
- fbdcddedc Merge pull request #6076 from jonyhy96/cleanup-import
- c76c9f2cc Merge pull request #6069 from jonyhy96/feat-grpc-options
- 049042382 fix: update vendor
- 5c2426a7b cleanup: import from k8s.io/utils/clock/testing instead
- 6484fab1e cleanup: import from k8s.io/utils/clock instead
- d16942cf1 feat: enable cri remote client to call with grpc calloptions
- a06a0990e Merge pull request #6074 from mikebrow/cleanup
- ca35f4e82 Windows: Cleanup rm- prefixed layers
- f6b7e07fd cleanup k8s ansible yaml (carry for https://github.com/jayonlau <[email protected]>)
- f90ebaf1c Merge pull request #6070 from jonyhy96/feat-import-platform
- 96fda588b Merge pull request #6065 from dmcgowan/mirror-action-custom-tag
- 933ddaa6f fix: wrong flag type
- da16d492c feat: support import image for specific platform
- d132691f1 Merge pull request #6059 from jonyhy96/feat-cmd-flag
- 67b883146 Update mirror images to take target image name
- e6ddffc2a fix: make exec-id flag required in exec command
- 0f27a423e Merge pull request #6052 from ktock/uncompress-compression-pkg
- 6416cc35c Merge pull request #5922 from zouyee/replace
- 09c9270fe images: enable converter to uncompress zstd
- 5162238c7 Merge pull request #5853 from claudiubelu/integration/windows-hostprocess
- 694a00754 replace deprecated function
- f40df655c Merge pull request #6047 from ktock/fix-build-main
- 2bc77b8a2 Adds Windows resource limits support
- 224454062 Fix main branch build is broken
- 22beecb7d Merge pull request #6003 from cpuguy83/add_otel_log_hook
- efc90baf5 Merge pull request #6023 from dcantah/fix-lcow-withusername
- 7c621e1fc btrfs: reduce permissions on plugin directories
- 4921fb6b6 Merge pull request #5946 from zouyee/errors
- fcffe0c83 switch usage directly to errdefs.(ErrAlreadyExists and ErrNotFound)
- 45e0e5a77 Merge pull request #5926 from claudiubelu/import-add-platform-check
- c5e23649d Merge pull request #6043 from dmcgowan/fix-metadata-content-panic
- c23f52af3 Merge pull request #6001 from cpuguy83/trace_exporter_plugin
- b23ec233a Merge pull request #5916 from claudiubelu/windows/image-import
- a4fa3a716 Merge pull request #6017 from thaJeztah/fix_main_nomodules
- b9cf0d75a Fix panic in metadata content writer on copy error
- 6886c6a2e v1 runtime: reduce permissions for bundle dir
- 7d56b24f1 v2 runtime: reduce permissions for bundle dir
- d0bedc5bd Merge pull request #5979 from TianTianBigWang/fix/err-string-fmt
- 7a7a9a282 integration: Adds test for multilayer image import
- f7658e37d runtime: should fail fast if dial error on shim
- 483d2e947 go.mod: update opentelemetry modules to v1.0.0
- 483e23bdc Merge pull request #6036 from dmcgowan/add-mirror-action
- f6c1e7ed8 Merge pull request #6027 from alakesh/log-fix
- 084387e0b Move tracing to plugin
- 45c3453a7 Add open telemetry logging hook for logrus
- 6fd80dea3 Merge pull request #5991 from akhramov/freebsd/fix-tar-headers
- 16f3d67b5 add current process state to the error message
- 407d60694 Add github action to mirror image
- 03d1a0fa7 Merge pull request #6035 from kzys/virt-ip
- 97df73004 gha: collect Vagrant VMs' IP addresses
- 2bffb5f9b FreeBSD: fix tar headers & the nil check on getxattr
- 3393970dd Merge pull request #6033 from zouyee/continuity
- 90c6ff97a Merge pull request #5997 from ktock/deduped-ref
- 7854e0bff bump continuity and console version that remove pkg/errors
- 2e2956ba2 Merge pull request #5998 from kaijchen/patch-1
- 16d3f48a2 ctr namespaces: improve usage string
- ecbd7c653 Merge pull request #6028 from zouyee/bump
- 50da67359 refactor: move from io/ioutil to io and os package
- a68fb7add bump console version to v1.0.3 that remove pkg/errors
- c16be1a5e Merge pull request #6032 from dmcgowan/update-integration-test-images
- 3e72e335f Use github images for integration tests
- d72d2794d Merge pull request #5995 from wssccc/wssccc-patch-2
- 55893b9be Add CNI conf based on runtime class
- 50a568595 Change oci.WithUser behavior for LCOW
- 65f6a896c Fuzzing: Add 4 fuzzers + small modifications
- 7ddf5e52b Merge pull request #6012 from estesp/set-image-labels
- 7d6e9773a Merge pull request #5970 from cpuguy83/cancel_on_signal
- 2fecf5b02 Make sure exit signals trigger an exit during init
- f40df3d72 Enable image config labels in ctr and CRI container creation
- d081457ba Merge pull request #5974 from claudiubelu/hanging-task-delete-fix
- 40c7d1d16 Merge pull request #5985 from AkihiroSuda/crun-1.0
- 6875aa5d3 import: Add option to skip creating digest image
- da6b0efcc Merge pull request #5982 from AkihiroSuda/clone3
- f700ae873 CI: bump up crun to 1.0
- 55923daa9 seccomp: support "clone3" (return ENOSYS unless SYS_ADMIN is granted)
- 8596d1188 Fix typo
- 493220b71 Merge pull request #5990 from estesp/update-go-1.17.1
- 73dbbf5bf Update to Go 1.17.1
- cbf9d88c9 Merge pull request #5987 from wllenyj/ci
- 498e5b27f fix error string format
- 6d961f967 CI: Switch to available latest images
- 8493cd1a5 Merge pull request #5610 from alakesh/xfs-support-devmapper
- e087b47e9 import: Raise error if the imported image is filtered out
- 8cf06feac Merge pull request #5956 from claudiubelu/windows/fixes-task-delete-force
- e1ad77910 Merge pull request #5817 from dmcgowan/shim-plugins
- 91b64c58b add xfs support to devicemapper snapshotter
- 3d734d034 Merge pull request #5976 from ukontainer/pr-continuity
- d9f921e4f Merge pull request #5906 from thaJeztah/replace_os_exec
- 8766f2118 Merge pull request #5972 from zouyee/labels
- 94b86a6b9 Merge pull request #5966 from dmcgowan/fix-unexpected-eof-handling
- 8ff8b1b82 vendor: update continuity for darwin support
- 6589876d2 Merge pull request #5964 from crosbymichael/cni-pref
- 689a863ef Merge pull request #5939 from scuzhanglei/privileged-device
- 1ddc54c00 Merge pull request #5954 from claudiubelu/fix-sandbox-remove
- 1efed4309 add ip_pref CNI options for primary pod ip
- 16cd6ed13 Additional integration tests for pulling image with labels
- 756f4a314 cri: add devices for privileged container
- a4d64e5e0 Merge pull request #5969 from crosbymichael/pin-pbuild
- 55c55b071 Merge pull request #5965 from crosbymichael/ctd-metric
- 9954147c0 pin protobuild version to tag
- 2458afeb1 Fix content copy to not ignore unexpected EOF
- 6bec0d39b use a const metric for build_info
- ae27a6b05 Add metric exposing build version&revision
- d58542a9d Merge pull request #5627 from payall4u/payall4u/cri-support-cgroup-v2
- d040ca384 Merge pull request #5861 from kzys/restart-monitor
- 5e32e9d85 Merge pull request #5917 from mxpv/issue_forms
- b01cad3b5 Merge pull request #5945 from fuweid/fix_5900
- 99987f2a5 Merge pull request #5936 from ukontainer/feature-darwin-runtime-shim
- bdb41f607 Merge pull request #5858 from levinxo/patch-1
- 5540fc428 Merge pull request #5949 from wzshiming/fix/write-diff
- bef14adfd Merge pull request #5958 from zouyee/dail
- b06d0a3e0 Merge pull request #5951 from adelina-t/ws_2022_job
- 8e850bc0f replace deprecated Dail with DailContext
- ff75f7d48 Merge pull request #5943 from AdamKorcz/fuzz13
- 0ae5c41f1 Merge pull request #5944 from zouyee/deprecated
- 132aa56ee Merge pull request #5947 from kerthcet/feature/upgrade-pause-image-to-3.6
- aeea697d8 Add WS2022 support in Windows Periodic tests
- 55faa5e93 task delete: Closes task IO before waiting
- f42513112 integration: Adds Windows HostProcess tests
- ccc5ee303 archive: Add WriteDiff error logs
- 820bd9269 fix document non-synchronous in crictl.md
- 2bcd6a4e8 cri: patch update image labels
- 789abc936 using Hosts replace deprecated field
- 57e10439d Fixes task kill --force on Windows
- abf4de498 integration: Enables Windows containerd restart test
- 96ec0b6f3 content fuzzer: Clean up tempdir
- 61a46e9fd Merge pull request #5929 from dcantah/update-hcsshim-0.8.21
- dd8b6ee3f Merge pull request #5937 from kolyshkin/riscv-pie
- eb2530be8 Makefile.linux: build on riscv with PIE
- 6b0b64a51 ctr: Fixes Windows image import
- a43fa9f28 darwin: runtime support
- 5dd38792a darwin: use the default values for socketRoot variable
- 1dfd8a279 Merge pull request #5932 from dcantah/ctr-exec-add-cwd
- 27046a9e0 Fix cwd flag for `ctr tasks exec`
- 24cec9be5 sandbox: Allows the sandbox to be deleted in NotReady state
- 1dd0d59b7 go.mod: Update hcsshim to v0.8.21
- e00f87f1d Merge pull request #5927 from adelina-t/ws_2022_image_update
- 4bc5ca76e Merge pull request #5122 from mythi/non-root-containers-and-devices-v2
- 6d3d34b85 Update Pause image in tests & config
- 278176db1 Address issue forms feedback
- 44d5a7e26 Merge pull request #5921 from ktock/fix-failed-precondition
- 0d5223d70 Merge pull request #5845 from alexandref75/fix-dir-device-support
- 838afd211 Adding testing of two devices
- ebcf876bf Merge pull request #5914 from claudiubelu/windows/platform-default-match
- e0f8c04da cri: Devices ownership from SecurityContext
- 7bc5aa74c Fix pull fails on unexpected EOF
- 11ab3cba0 Use issue forms for bug reporting
- e2c769d6f windows: The DefaultSpec platform should match the Default matcher
- 7826a21ac Update RELEASES.md
- af1a0908d Merge pull request #5865 from dcantah/windows-pod-runasusername
- 2ac996840 replace uses of os/exec with golang.org/x/sys/execabs
- ebe8f8c6b Merge pull request #5899 from AkihiroSuda/runc-v1.0.2
- 6fa958853 Merge pull request #5903 from AkihiroSuda/gofmt117
- 81317350c Merge pull request #5905 from thaJeztah/update_toml
- 25644b461 Add RunAsUserName functionality for the Windows Pod Sandbox Container
- e18516767 go.mod: update runc to v1.0.2
- 3f8ea1b6a update runc binary to v1.0.2
- f43f22966 Merge pull request #5902 from dweomer/rke2-690-on-main
- 429296910 go.mod: github.com/pelletier/go-toml v1.9.3
- f8dfbee17 add cri test case
- 9a8bf1315 feature: add field LinuxContainerResources.Unified on cri
- d3aa7ee9f Run `go fmt` with Go 1.17
- c3609ff4c cri: filter selinux xattr for image volumes
- ff2e58d11 Merge pull request #5131 from perithompson/windows-hostnetwork
- 736222dd8 Merge pull request #5897 from kzys/upgrade-golangci-lint
- 70d122b29 Merge pull request #5889 from estesp/update-go-1.17
- a6034d021 Merge pull request #5896 from kzys/pid-order
- 4dd5ca70f script: update golangci-lint from v1.38.0 and v1.36.0 to v1.42.0
- f7b1ceb9f integration: investigate TestRestartMonitor's failure
- acb81bbda integration: fix TestContainerPids
- 9fe7bc938 Bump integration timeout to 35 min
- 7fba86264 Fix dir support for devices V3 (#4847)
- a5eccab27 Merge pull request #5891 from crosbymichael/net-host-env
- 6f60b3016 [ctr] add HOSTNAME env for host network
- 8d135d284 Add support for shim plugins
- fda782a7b Merge pull request #5886 from AdamKorcz/fuzz11
- c076ede40 Merge pull request #5884 from adisky/add-systemd-env
- f8602c372 Update to Go 1.17
- c9b1b2fd5 Fuzzing: Add fuzzer
- 9e1b57ca0 Add env for SystemdCgroup driver
- 024804b1b Merge pull request #5878 from gjkim42/allow-expanded-dns-config
- 1224060f8 Allow expanded DNS configuration
- d0be7b90f Merge pull request #5863 from AdamKorcz/fuzz10
- 538d93d2f Fuzzing: Add 4 fuzzers
- 79b369a0b Added windows hostProcess cni skip
- 7d4c95ff0 Merge pull request #5813 from mxpv/shim_cleanup
- 159c0f04e Merge pull request #5840 from AdamKorcz/fuzz9
- 1c4e9d048 Merge pull request #5846 from crosbymichael/ctr-cpu.shares
- 0fbcf9b97 Merge pull request #5847 from kzys/master-to-main
- 4c7338aa6 Merge pull request #5849 from kzys/lock-error-2
- 0ae2d3987 Merge pull request #5857 from dims/fix-bad-make-protos-failure
- 82fe0db9a Fix bad `make protos` failure
- ed564061e Merge pull request #5851 from zouyee/location
- 56c5daa52 Merge pull request #5856 from kzys/remove-fossa
- 37f2c7ca8 Merge pull request #5850 from thaJeztah/runc_build_docs
- 284c29dde Merge pull request #5836 from dcantah/k8s122
- 1c47fb17f docs: remove FOSSA's badge
- bc4cea4e4 docs: rename main to master
- 9d07f8d9a Merge pull request #5852 from adelina-t/add_trap_cri_integration_script
- 5e49ec27d Use http.Get to download binaries instead of exec.Command
- e6538b8bc Add trap to cri-integration test script
- d2f3b7146 add cpu-shares to ctr
- 30b832e49 archive docs and point to new location fix #https://github.com/containerd/cri/issues/1624
- 9cc179aa7 BUILDING.md: remove some bits about building runc
- 42b57cc73 BUILDING.md: markdown fixes
- 0bcd45d3a Merge pull request #5848 from kzys/build-flags
- a3d6edc0e content: return the error with its timestamp
- a5468852f docs: list all snapshotter-related build flags
- e634f04d8 go.mod: update kubernetes to v1.22.0
- 11a90c7ff Fuzzing: Add experimental version of container fuzzer
- 218db0f9a Merge pull request #5835 from dmcgowan/plugin-events-cleanup
- 7f0be5edd Merge pull request #5839 from dcantah/ci-weirdness
- 1373bc519 Merge pull request #5842 from thaJeztah/update_go_116
- 42a28ad2c Update Go to 1.16.7
- fedd657ea Merge pull request #5838 from mxpv/ci
- 534685f95 Fix Linux CI Linter using go 1.15.14
- 10eab21a4 Cleanup CI
- 587fc0925 Merge pull request #5834 from dmcgowan/remove-redundant-build-tags
- 0a0621bb4 Move plugin context events into separate plugin
- 6f027e38a Remove redundant build tags
- b43d9502c Merge pull request #5830 from mxpv/darwin
- 5b76d08f4 Merge pull request #5731 from alakesh/opentelemetry-basic
- 3c5424454 [otel-tracing] vendor and go modules changes
- 3597ac859 [otel-tracing] Initial opentelemetry support
- 7917da764 Change default directories on Darwin
- 10824eaf2 remove go 1.13 from containerd
- d30d897ef Cleanup v2 shim
- b97a56b71 Merge pull request #5829 from AdamKorcz/fuzz8
- c3c276ae1 Fuzzing: Fix for OSS-fuzz issue 36825
- dd08c7a49 Merge pull request #5825 from AdamKorcz/fuzz7
- 424d7e47b Merge pull request #5760 from thaJeztah/cleanup_test_scripts
- 6c257552a scripts: declare ROOT closer to where it's used, and some DRY changes
- dba0ef4eb scripts: add missing quotes, and minor linting issues
- 0cb656860 test/build-utils.sh: remove support for Debian Jessie
- 41a04246f Fuzzing: Add two more fuzzers
- 7d4891783 Merge pull request #5821 from thaJeztah/simplify_platforms_format
- 58dbe9685 Merge pull request #5823 from AdamKorcz/fuzz6
- 2c699cc35 Fuzzing: Remove panics of container_fuzzer
- f2c3122e9 platforms: Format(): use path.Join() instead of joinNotEmpty()
- f12040b6b Merge pull request #5785 from AdamKorcz/fuzz5
- acecd6603 Change protoc link
- fcd9c4199 Merge pull request #5746 from lifupan/main
- ee1dfc0cd Merge pull request #5809 from isugimpy/main
- ce437864b mergo: Upgrade to 0.3.12 to fix panic
- 4282ec12c Merge pull request #5802 from rst0git/ci-criu-ppa
- d1e868c83 ci: install criu from PPA
- 5d3e8fd2c Merge pull request #5144 from devholic/release-non-cni-version
- a3e431ad4 Merge pull request #5725 from adelina-t/enable_critest
- 2b9f8334c Merge pull request #5792 from dims/script-to-check-if-entries-in-go.mod-files-are-in-sync
- fb589a713 Merge pull request #5043 from IRCody/shared_namespace
- 9eb08bf8e Merge pull request #5784 from thaJeztah/update_goos_list
- 1dadd6a1d Merge pull request #5804 from IRCody/proto-download
- e692a0192 Add shared content label to namespaces
- 3a8622e30 Updates the location of protobuf downloads in docs
- c4664bdac Merge pull request #5803 from dmcgowan/fix-protobuf-install
- 0d9393650 Update protobuf install to use correct repository
- d62d6c11d Split release steps into multiple tasks
- b4807122d Update release workflow to upload binary without CNI
- 5280530a0 Merge pull request #5624 from ktock/overlayupper
- 67406b373 overlay: add an optional label of upperdir location of each snapshot
- 43117cf91 Script to check if entries in go.mod files are in sync
- caf9e256b Merge pull request #5693 from kzys/sigrtmin
- 742ffadfb Merge pull request #5800 from zhuangqh/binarycall-timeout
- 6d31cdda5 Merge pull request #5716 from dims/add-new-go-module-for-api-directory
- 4ab3e7a53 runtime: fix the issue of create new socket with abstract address
- cc88f8e0a Split fuzzer to two fuzzers
- 7a10fd4fc respect context timeout in shim binary call
- 23bc3db91 Enable critest on Windows
- 494b940f1 Introduce a new go module - containerd/api for use in standalone clients
- 158901756 Merge pull request #5606 from zwtop/master
- b5b5dcc27 Merge pull request #5162 from claudiubelu/integration-test-images
- ce3d6e9bf Merge pull request #5795 from mikebrow/cri-support-metrics
- 0def98e46 Merge pull request #5794 from mikebrow/clarify-host-docs
- 4fdb88464 add CRI support matrix to RELEASES.md
- b5fc7846c adding a little more clarity
- 3a503acd5 Merge pull request #5793 from thaJeztah/gotestsum_1.7
- 1d3d08026 Support SIGRTMIN+n signals
- 18d6cc1b0 update gotestsum to v1.7.0
- 3b7a3d599 Merge pull request #5756 from Kern--/discard-blocks
- f6fa3fdd7 Merge pull request #5590 from oss-qm/submit/makefile-tags
- 559f9a5b9 Merge pull request #5744 from mxpv/metrics
- ee3272e9c Merge pull request #5745 from yylt/check
- c3f1f0e5e Merge pull request #5775 from kzys/pid-order
- efa8ab715 Add runtime label to metrics
- 6294235d8 Fuzzing: Add container fuzzer
- 2405671d4 platforms: add "ios" as known OS, "loong64" as known ARCH
- a963242f7 Merge pull request #5779 from AdamKorcz/fuzz4
- 2556aac67 Fuzzing: Add archive fuzzer
- 0d45ac14e interface about shim build check
- 00d52bb15 integration: log all processes to investigate the test failure
- a137b64f5 Merge pull request #5687 from AdamKorcz/fuzz3
- ee27cde73 Merge pull request #5735 from ktock/diffcompression
- f1d79d33b Discard blocks when removing a thin device
- 6389fc79f Merge pull request #5770 from wzshiming/fix/push-docker-remote-close
- 5a874e081 Merge pull request #5769 from wzshiming/fix/fetch-docker-remote-close
- e325184c8 Merge pull request #5771 from thaJeztah/update_md2man
- d2b6d192d Update cpuguy83/go-md2man binary to v2.0.1
- 53ec1abec remotes/docker/pusher.go: Fix missing Close()
- 67d07fe5c remotes/docker/fetcher.go: Fix missing Close()
- 0789a0c02 Add docker fetch fuzzer
- b809212b1 Merge pull request #5750 from thaJeztah/cleanup_test_dockerfile
- b483177ee Support custom compressor for walking differ
- 1292c50fe Merge pull request #5754 from thaJeztah/update_gotestsum
- 51a8f969b Merge pull request from GHSA-c72p-9xmj-rx3w
- b88bf1eca Merge pull request #5755 from adisky/gce-configure-use-systemd
- 29b86c547 Merge pull request #5751 from AkihiroSuda/runc-v1.0.1
- 150e07b64 Use systemd cgroup driver for cgroupv2 tests
- 603962bc8 update gotestsum to current master
- a12c7bd1c go.mod: runc v1.0.1
- 43e0594ae update runc binary to v1.0.1
- 9537bc265 Dockerfile.test: build containerd in separate stage
- 36be5ef3a Dockerfile.test: add GOLANG_IMAGE build arg to allow overriding
- 8faacfca1 Dockerfile.test: clean up apt indexes after installing
- 9f7e6335c Dockerfile.test: build critools in a separate stage
- 7ec8e2d36 Dockerfile.test: build cni in a separate stage
- f9f423c07 Dockerfile.test: standard directory to collect build aftifacts
- e9f26eb87 Dockerfile.test: split dev stage, and optimize order
- 25fada0cc Dockerfile.test: skip curl, gcc, git and make install
- 546538971 install-critools: make sure DESTDIR exists
- e830c5364 Merge pull request #5737 from thaJeztah/remove_redundant_check
- dbef1d56d runtime: runc v2: remove redundant validation
- 34fb8d896 Merge pull request #5727 from dmcgowan/test-monitor-restart-grace
- 18321f539 Move loop check to before sleep
- 2e8a572df Add timestamp to flaky restart monitor test
- d527926cd Merge pull request #5722 from AkihiroSuda/go1.16.6
- 55fd2ab5d integration/client: go mod tidy
- e72046f86 Update Go to 1.16.6
- cbdebd18e Merge pull request #4447 from kzys/grpc-error
- b6aa5a48b Merge pull request #5712 from coryb/docker-push-close-body
- bc4e416c8 Add test for archive breakout test for lchmod
- a8ef1fc48 Merge pull request #5710 from fuweid/cri-cleanup
- 894b6ae39 Fix missing Body.Close() calls on push to docker remote
- ac75071b4 remove pkg/cri/platforms package
- 51f2ce92f Merge pull request #5709 from cpuguy83/custom_client
- 0a8802df6 Allow WithServices to use custom implementations
- 0dcffc3ee Merge pull request #5673 from dcantah/hcsshim-0.8.18
- d38c186d9 Merge pull request #5578 from claudiubelu/integration/failed-container
- cf600abec Merge pull request #5619 from mikebrow/cri-add-v1-proxy-alpha
- 9fa7d1507 Merge pull request #5682 from kzys/gha-fork
- 31d78444e Merge pull request #5666 from wllenyj/plugin_test
- aefbe7c1c Merge pull request #5700 from AkihiroSuda/test-cri-in-userns
- 71c1dc661 Merge pull request #5676 from dmcgowan/update-for-distribution-spec-1.0
- aefabe546 Dockerfile.test: add "cri-in-userns" (aka rootless) test stage
- 0573e22e3 Merge pull request #5702 from dmcgowan/archive-cleanup-lchmod
- 53835221f Cleanup lchmod logic in archive
- d1c105192 use fu wei's suggeted interface pick for marshaling
- 14962dcbd add alpha version
- 4c6e4a06f gha: make release workflow work in forks
- 73d28ddeb client: surface a connection error more clearly
- 7eceeb950 Merge pull request #5571 from adelina-t/win_set_specific_go_version
- a7ad6b3be Add support for registry host path override
- 3a0b9ec6b Add unit test for plugin
- 95c708572 Update documenation for OCI distribution 1.0
- a81f05f36 [Vendor] Update hcsshim to 0.8.18
- 16deba098 integration: Windows volume-copy-up images
- 63fe34add grpc config add options tcp_tls_ca
- 25d7f907c Merge pull request #5660 from BigVan/main
- a5c417ac0 move up to CRI v1 and support v1alpha in parallel
- bda7b5866 feat: Add snapshotter label to the new snapshot for container.
- 0bd2a86b1 Merge pull request #5655 from kzys/dm-log
- e72a56a1e Merge pull request #5662 from thaJeztah/fix_destdir
- 2019a1e68 Makefile: fix DESTDIR and PREFIX concatenation
- 04ab4418f test integration: Adds a test that restarts a failed container
- e1f28659b Merge pull request #5287 from claudiubelu/cri-integration-cleanup
- 03ee45006 snapshot/devmapper: log exported methods correctly
- c8c6e…
Update Docker-CE to the 20.10.21 stable release, aligned with the
respective runc and containerd versions as done upstream.

Upstream release notes available at
https://docs.docker.com/engine/release-notes/#201021.

archive/tar changes reverted as those are only compatible with golang
1.18, and we are still based on 1.17 in kirkstone.

Signed-off-by: Ricardo Salveti <[email protected]>

Unverified

The email in this signature doesn’t match the committer email.
Update docker-compose to the latest version that is still compatible
with golang 1.17.

Release notes for 2.10.x:
* https://github.com/docker/compose/releases/tag/v2.10.0
* https://github.com/docker/compose/releases/tag/v2.10.1
* https://github.com/docker/compose/releases/tag/v2.10.2

Signed-off-by: Ricardo Salveti <[email protected]>
@ricardosalveti ricardosalveti changed the title Update container stack to the latest possible o kirkstone Update container stack to the latest possible on kirkstone Nov 19, 2022
Copy link
Contributor

@MrCry0 MrCry0 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@mike-sul
Copy link
Contributor

@ricardosalveti Can we update nerdctl too, or we don't control its version explicitly only via meta-virtualization?

Copy link
Contributor

@Tim-Anderson Tim-Anderson left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@ricardosalveti
Copy link
Member Author

@ricardosalveti Can we update nerdctl too, or we don't control its version explicitly only via meta-virtualization?

We can update it as well, let me have a look.

Unverified

The email in this signature doesn’t match the committer email.
Import nerdctl v0.22.2 (and required patches) from
meta-virtualization 08a59b4, and also
refresh local patches for compatibility with this version.

Signed-off-by: Ricardo Salveti <[email protected]>
@ricardosalveti
Copy link
Member Author

@mike-sul updated to the latest from current meta-virtualization, which is version 0.22.2 (not the latest but updating to the latest will require a bit of effort due the way the recipe was created).

Updated your patches but only build tested it, mind giving it a shot? Thanks!

@mike-sul
Copy link
Contributor

Updated your patches but only build tested it, mind giving it a shot? Thanks!

It works for me. aklite works as expected if it uses nerdctl v0.22.2 instead of docker compose.

root@intel-corei7-64:/var/sota# nerdctl --version
nerdctl version 0.22.2-2-ge084a2d.m
root@intel-corei7-64:/var/sota# nerdctl ps 
CONTAINER ID    IMAGE                                                                                                     COMMAND                   CREATED           STATUS    PORTS                     NAMES
04d7dbf76003    docker.io/foundries/shellhttpd@sha256:bb95a5e0547f8834a6356b019ffe7e71c87f19a0a219e206cf8340a3d587011a    "/usr/local/bin/http…"    49 seconds ago    Up        0.0.0.0:8080->8080/tcp    simpleapp_httpd_1

@ricardosalveti
Copy link
Member Author

Nice, thanks! Will merge so we start testing the update.

@ricardosalveti ricardosalveti merged commit e3e1596 into foundriesio:main Nov 20, 2022
quaresmajose pushed a commit that referenced this pull request Jan 10, 2023
Bumping cloud-init to version 21.4-47-ga97fd062

 - patch refresh
 - add bash to RDPENDS

Commit summary:

    a97fd062 Add .git-blame-ignore-revs (#1161)
    bae9b11d Adopt Black and isort (SC-700) (#1157)
    2bcf4fa9 Include dpkg frontend lock in APT_LOCK_FILES (#1153)
    3da3bdae tests/cmd/query: fix test run as root and add coverage for defaults (#1156)
    9a6e65a2 Schema processing changes (SC-676) (#1144)
    35711700 Add dependency workaround for impish in bddeb (#1148)
    3303b704 netbsd: install new dep packages (#1151)
    f4692c5d find_devs_with_openbsd: ensure we return the last entry (#1149)
    e9634266 sources/azure: remove unnecessary hostname bounce (#1143)
    24739592 find_devs/openbsd: accept ISO on disk (#1132)
    b591e9db Improve error log message when mount failed (#1140)
    8df8f43a add KsenijaS as a contributor (#1145)
    6760bf14 travis - don't run integration tests if no deb (#1139)
    65c2cfd7 factor out function for getting top level directory of cloudinit (#1136)
    b21afb0a testing: Add deterministic test id (#1138)
    2969ceaa mock sleep() in azure test (#1137)
    0ed00ad9 Add miraclelinux support (#1128)
    cd40789a docs: Make MACs lowercase in network config (#1135)
    bedac77e Add Strict Metaschema Validation (#1101)
    f428ed16 update dead link (#1133)
    0e25076b cloudinit/net: handle two different routes for the same ip (#1124)
    6e39613d docs: pin mistune dependency (#1134)
    039c40f9 Reorganize unit test locations under tests/unittests (#1126)
    ffa6fc88 Fix exception when no activator found (#1129)
    0fe96a44 jinja: provide and document jinja-safe key aliases in instance-data (SC-622) (#1123)
    ff10fc09 testing: Remove date from final_message test (SC-638) (#1127)
    cf38c2cb Move GCE metadata fetch to init-local (SC-502) (#1122)
    a1cf55e5 Fix missing metadata routes for vultr (#1125)
    c39d4f45 cc_ssh_authkey_fingerprints.py: prevent duplicate messages on console (#1081)
    4bf4de25 sources/azure: remove unused remnants related to agent command (#1119)
    32860627 github: update PR template's contributing URL (#1120)
    b36b4e2f docs: Rename HACKING.rst to CONTRIBUTING.rst (#1118)
    31daf667 testing: monkeypatch system_info call in unit tests (SC-533) (#1117)
    1343584d Fix Vultr timeout and wait values (#1113)
    7ebf04e3 lxd: add preference for LXD cloud-init.* config keys over user keys (#1108)
    3c6b594b VMware: source /etc/network/interfaces.d/* on Debian
    62721ae7 Add cjp256 as contributor (#1109)
    36adb6da integration_tests: Ensure log directory exists before symlinking to it (#1110)
    7f03da35 testing: add growpart integration test (#1104)
    8c52bb3f integration_test: Speed up CI run time (#1111)
    f0af9f78 Some miscellaneous integration test fixes (SC-606) (#1103)
    918d69a0 tests: specialize lxd_discovery test for lxd_vm vendordata (#1106)
    22150a20 Add convenience symlink to integration test output (#1105)
    fff6de4a Fix for set-name bug in networkd renderer (#1100)
    3d150688 Wait for apt lock (#1034)
    6421a202 testing: stop chef test from running on openstack (#1102)
    820e3d1c alpine.py: add options to the apk upgrade command (#1089)
    db6084bd Release 21.4 (#1091)
    ff415cad Azure: fallback nic needs to be reevaluated during reprovisioning (#1094)
    48467aa3 azure: pps imds (#1093)
    d54e23bf testing: Remove calls to 'install_new_cloud_init' (#1092)
    77376534 Add LXD datasource (#1040)
    b1beb538 Fix unhandled apt_configure case. (#1065)
    a90d8338 Allow libexec for hotplug (#1088)
    0f8428f6 Add necessary mocks to test_ovf unit tests (#1087)
    28581988 Remove (deprecated) apt-key (#1068)
    d4fe4bf5 distros: Remove a completed "TODO" comment (#1086)
    d77d6bf1 cc_ssh.py: Add configuration for controlling ssh-keygen output (#1083)
    1d01da5d Add "install hotplug" module (SC-476) (#1069)
    75b26b0a hosts.alpine.tmpl: rearrange the order of short and long hostnames (#1084)
    994339ae Add max version to docutils
    e6f15ae5 cloudinit/dmi.py: Change warning to debug to prevent console display (#1082)
    a8380a12 remove unnecessary EOF string in disable-sshd-keygen-if-cloud-init-active.conf (#1075)
    a4236c37 Add module 'write-files-deferred' executed in stage 'final' (#916)
    81f6aa16 Bump pycloudlib to fix CI (#1080)
    2db71334 Remove pin in dependencies for jsonschema (#1078)
    6cf9dc87 Add "Google" as possible system-product-name (#1077)
    2107ad01 Update Debian security suite for bullseye (#1076)
    8c89009e Leave the details of service management to the distro (#1074)
    3a6bee59 Fix typos in setup.py (#1059)
    150fd30e Update Azure _unpickle (SC-500) (#1067)
    ee296ced cc_ssh.py: fix private key group owner and permissions (#1070)
    a0a68a24 VMware: read network-config from ISO (#1066)
    70f0ee78 testing: mock sleep in gce unit tests (#1072)
    62c2a56e CloudStack: fix data-server DNS resolution (#1004)
    125dcb28 Fix unit test broken by pyyaml upgrade (#1071)
    a9501251 testing: add get_cloud function (SC-461) (#1038)
    b3e31ba2 Inhibit [email protected] if cloud-init is active (#1028)
    76166caf VMWARE: search the deployPkg plugin in multiarch dir (#1061)
    ca0da042 Fix set-name/interface DNS bug (#1058)
    1ee2f3c3 Use specified tmp location for growpart (#1046)
    048a825c .gitignore: ignore tags file for ctags users (#1057)
    725a7f7f Allow comments in runcmd and report failed commands correctly (#1049)
    fd595774 tox integration: pass the *_proxy, GOOGLE_*, GCP_* env vars (#1050)
    9c147e83 Allow disabling of network activation (SC-307) (#1048)
    3d2bac8b renderer: convert relative imports to absolute (#1052)
    1bbb67ca Support ETHx_IP6_GATEWAY, SET_HOSTNAME on OpenNebula (#1045)
    de166ec3 integration-requirements: bump the pycloudlib commit (#1047)
    81a8f0a6 lp-to-git-users: adding vholer (#1044)
    591e97da Allow Vultr to set MTU and use as-is configs (#1037)
    392c3262 pin jsonschema in requirements.txt (#1043)
    ba083245 testing: remove cloud_tests (#1020)
    934c8d71 Add andgein as contributor (#1042)
    82d6f564 Make wording for module frequency consistent (#1039)
    2d67c1b9 Use ascii code for growpart (#1036)
    21aec00f Add jshen28 as contributor (#1035)
    c29c5b1d Skip test_cache_purged_on_version_change on Azure (#1033)
    8cebc449 Remove invalid ssh_import_id from examples (#1031)
    244af3f4 Cleanup Vultr support (#987)
    24a15e9c docs: update cc_disk_setup for fs to raw disk (#1017)
    a1e78b2e HACKING.rst: change contact info to James Falcon (#1030)
    089a307d tox: bump the pinned flake8 and pylint version (#1029)
    e27c3074 Add retries to DataSourceGCE.py when connecting to GCE (#1005)
    dc227869 Set Azure to apply networking config every BOOT (#1023)
    612e3908 Add connectivity_url to Oracle's EphemeralDHCPv4 (#988)
    cb82a450 docs: fix typo and include sudo for report bugs commands (#1022)
    5ea2c669 VMware: Fix typo introduced in #947 and add test (#1019)
    d4fe7bc4 Update IPv6 entries in /etc/hosts (#1021)
    023f97d4 Integration test upgrades for the 21.3-1 SRU (#1001)
    26a92b0d Add Jille to tools/.github-cla-signers (#1016)
    f3cc9494 Improve ug_util.py (#1013)
    f4c47e3e Support openEuler OS (#1012)
    2ce85724 ssh_utils.py: ignore when sshd_config options are not key/value pairs (#1007)
    e69a8874 Set Azure to only update metadata on BOOT_NEW_INSTANCE (#1006)
    7fe0f900 cc_update_etc_hosts: Use the distribution-defined path for the hosts file (#983)
    f6c71fd7 Add CloudLinux OS support (#1003)
    db72c841 puppet config: add the start_agent option (#1002)
    58c2de4c Fix `make style-check` errors (#1000)
    76cff793 Make cloud-id copyright year (#991)
    7fc3f08e Add support to accept-ra in networkd renderer (#999)
    de8931ed Update ds-identify to pass shellcheck (#979)
    28e56d99 Azure: Retry dhcp on timeouts when polling reprovisiondata (#998)
    6803368d testing: Fix ssh keys integration test (#992)
    03ee10cd Release 21.3 (#993)
    3ec8ddde Azure: During primary nic detection, check interface status continuously before rebinding again (#990)
    7d3f5d75 Fix home permissions modified by ssh module (SC-338) (#984)
    94679e17 Add integration test for sensitive jinja substitution (#986)
    776bd363 Ignore hotplug socket when collecting logs (#985)
    3e63025a testing: Add missing mocks to test_vmware.py (#982)
    0bf8d575 add Zadara Edge Cloud Platform to the supported clouds list (#963)
    b9c96b4f testing: skip upgrade tests on LXD VMs (#980)
    65607405 Only invoke hotplug socket when functionality is enabled (#952)
    f516a7d3 Revert unnecesary lcase in ds-identify (#978)
    04047438 cc_resolv_conf: fix typos (#969)
    1c3b10b5 Replace broken httpretty tests with mock (SC-324) (#973)
    e119cece Azure: Check if interface is up after sleep when trying to bring it up (#972)
    7781dec3 Update dscheck_VMware's rpctool check (#970)
    82a30e6d Azure: Logging the detected interfaces (#968)
    b9d308b4 Change netifaces dependency to 0.10.4 (#965)
    d3271217 Azure: Limit polling network metadata on connection errors (#961)
    c62cb3af Update inconsistent indentation (#962)
    9893dfcd cc_puppet: support AIO installations and more (#960)
    3c858591 Add Puppet contributors to CLA signers (#964)
    8b4a9bc7 Datasource for VMware (#953)
    049d62b6 photon: refactor hostname handling and add networkd activator (#958)
    00dbaf1e Stop copying ssh system keys and check folder permissions (#956)
    13b6a857 testing: port remaining cloud tests to integration testing framework (SC-191) (#955)
    8f42eb54 generate contents for ovf-env.xml when provisioning via IMDS (#959)
    3d9c862b Add support for EuroLinux 7 && EuroLinux 8 (#957)
    758acf97 Implementing device_aliases as described in docs (#945)
    824977bd testing: fix test_ssh_import_id.py (#954)
    6e7066ea Add ability to manage fallback network config on PhotonOS (#941)
    4257e30a Add VZLinux support (#951)
    f0ab1e64 VMware: add network-config support in ovf-env.xml (#947)
    ec6afadb Update pylint to v2.9.3 and fix the new issues it spots (#946)
    a984ee78 Azure: mount default provisioning iso before try device listing (#870)
    4fbe192a Document known hotplug limitations (#950)
    184c836a Initial hotplug support (#936)
    eacb0353 Fix MIME policy failure on python version upgrade (#934)
    881be6e7 run-container: fixup the centos repos baseurls when using http_proxy (#944)
    a185f319 tools: add support for building rpms on rocky linux (#940)
    9b52405c ssh-util: allow cloudinit to merge all ssh keys into a custom user file, defined in AuthorizedKeysFile (#937)
    108611ae VMware: new "allow_raw_data" switch (#939)
    7f5e6822 bump pycloudlib version (#935)
    894dd7c4 add renanrodrigo as a contributor (#938)
    36aeb49c testing: simplify test_upgrade.py (#932)
    db51b656 freebsd/net_v1 format: read MTU from root (#930)
    81299de5 Add new network activators to bring up interfaces (#919)
    78e89b03 - Detect a Python version change and clear the cache (#857)
    6e0aa175 cloud_tests: fix the Impish release name (#931)
    b5aecbe9 Removed distro specific network code from Photon (#929)
    35aa9db6 Add support for VMware PhotonOS (#909)
    f5a24496 cloud_tests: add impish release definition (#927)
    db23b1b1 docs: fix stale links rename master branch to main (#926)
    abd2da57 Fix DNS in NetworkState (SC-133) (#923)
    fbcb224b tests: Add 'adhoc' mark for integration tests (#925)
    1243c5a1 Fix the spelling of "DigitalOcean" (#924)
    c8d3f99b Small Doc Update for ReportEventStack and Test (#920)
    950c186a Replace deprecated collections.Iterable with abc replacement (#922)
    59a3d845 testing: OCI availability domain is now required (SC-59) (#910)
    59a848c5 add DragonFlyBSD support (#904)
    05b0e350 Use instance-data-sensitive.json in jinja templates (SC-117) (#917)
    b11632d1 doc: Update NoCloud docs stating required files (#918)
    9c400e46 build-on-netbsd: don't pin a specific py3 version (#913)
    29ac50f2 - Create the log file with 640 permissions (#858)
    503e2d39 Allow braces to appear in dhclient output (#911)
    63f72380 Docs: Replace all freenode references with libera (#912)
    fc161f8e openbsd/net: flush the route table on net restart (#908)
    7c1d27b8 Add Rocky Linux support to cloud-init (#906)
    c8db6032 Add "esposem" as contributor (#907)
    3611befb Add integration test for #868 (#901)
    1793b8b7 Added support for importing keys via primary/security mirror clauses (#882)
    21a0b120 [examples] config-user-groups expire in the future (#902)
    6fe19837 BSD: static network, set the mtu (#894)
    4c3c3629 Add integration test for lp-1920939 (#891)
    57964125 Fix unit tests breaking from new httpretty version (#903)
    86434699 Allow user control over update events (#834)
    899bfaa9 Update test characters in substitution unit test (#893)
    77320bfc cc_disk_setup.py: remove UDEVADM_CMD definition as not used (#886)
    8cf40a73 Add AlmaLinux OS support (#872)
    13877549 Release 21.2 (#890)
    f17f78fa Add \r\n check for SSH keys in Azure (#889)
    5f5fa5ee Revert "Add support to resize rootfs if using LVM (#721)" (#887)
    9ea643ff Add Vultaire as contributor (#881)
    ba82b3ef Azure: adding support for consuming userdata from IMDS (#884)
    5c740dcf test_upgrade: modify test_upgrade_package to run for more sources (#883)
    02db2c3e Fix chef module run failure when chef_license is set (#868)
    b2311664 Azure: Retry net metadata during nic attach for non-timeout errs (#878)
    431b3683 Azure: Retrieve username and hostname from IMDS (#865)
    d5cca27a Azure: eject the provisioning iso before reporting ready (#861)
    ced836e6 Use `partprobe` to re-read partition table if available (#856)
    d132356c fix error on upgrade caused by new vendordata2 attributes (#869)
    45db197c add prefer_fqdn_over_hostname config option (#859)
    0d90596b Emit dots on travis to avoid timeout (#867)
    cc16c922 doc: Replace remaining references to user-scripts as a config module (#866)
    9f9e154f azure: Removing ability to invoke walinuxagent (#799)
    0ae0b1d4 Add Vultr support (#827)
    83f6bbfb Fix unpickle for source paths missing run_dir (#863)
    fb38aa59 sysconfig: use BONDING_MODULE_OPTS on SUSE (#831)
    a9d3664c lp-to-git-users: adding B1Sandmann (#828)
    15dd3601 bringup_static_routes: fix gateway check (#850)
    fc5d5415 add hamalq user (#860)
    74fa008b Add support to resize rootfs if using LVM (#721)
    3b7e2e82 Fix mis-detecting network configuration in initramfs cmdline (#844)
    13606a12 tools/write-ssh-key-fingerprints: do not display empty header/footer (#817)
    6ae1145f Azure helper: Ensure Azure http handler sleeps between retries (#842)
    d4acc092 Fix chef apt source example (#826)
    bad84ad4 .travis.yml: generate an SSH key before running tests (#848)
    b794d426 write passwords only to serial console, lock down cloud-init-output.log (#847)
    c6726c2b Fix apt default integration test (#845)
    dae45c3b integration_tests: bump pycloudlib dependency (#846)
    f35181fa Fix stack trace if vendordata_raw contained an array (#837)
    3aeb14cd archlinux: Fix broken locale logic (#841)
    d95b448f Integration test for #783 (#832)
    74e1e50d integration_tests: mount more paths IN_PLACE (#838)
    9bd19645 Fix requiring device-number on EC2 derivatives (#836)
    6fe99157 Remove the vi comment from the part-handler example (#835)
    121bc04c net: exclude OVS internal interfaces in get_interfaces (#829)
    106c57d5 tox.ini: pass OS_* environment variables to integration tests (#830)
    3dd3de7c integration_tests: add OpenStack as a platform (#804)
    3be66630 Add flexibility to IMDS api-version (#793)
    62f7a8b1 Fix the TestApt tests using apt-key on Xenial and Hirsute (#823)
    a10838a6 doc: remove duplicate "it" from nocloud.rst (#825)
    2757333e archlinux: Use hostnamectl to set the transient hostname (#797)
    402d98ed cc_keys_to_console.py: Add documentation for recently added config key (#824)
    695c4f8f Update cc_set_hostname documentation (#818)
    d873b9dc Release 21.1 (#820)
    a64b7380 Azure: Support for VMs without ephemeral resource disks. (#800)
    e384a543 cc_keys_to_console: add option to disable key emission (#811)
    38aee6ee integration_tests: introduce lxd_use_exec mark (#802)
    66e2d42d azure: case-insensitive UUID to avoid new IID during kernel upgrade (#798)
    08d8902a stale.yml: don't ask submitters to reopen PRs (#816)
    33b6cf29 integration_tests: fix use of SSH agent within tox (#815)
    28d2d4b8 integration_tests: add UPGRADE CloudInitSource (#812)
    5a9008e5 integration_tests: use unique MAC addresses for tests (#813)
    6056ccd4 Update .gitignore (#814)
    7f1cefe9 Port apt cloud_tests to integration tests (#808)
    85e88af0 integration_tests: fix test_gh626 on LXD VMs (#809)
    84e56f84 Fix attempting to decode binary data in test_seed_random_data test (#806)
    09193e51 Remove wait argument from tests with session_cloud calls (#805)
    0497c7b1 Datasource for UpCloud (#743)
    3a0a5894 test_gh668: fix failure on LXD VMs (#801)
    3cebe0df openstack: read the dynamic metadata group vendor_data2.json (#777)
    36ddf1eb includedir in suoders can be prefixed by "arroba" (#783)
    6efe16d8 [VMware] change default max wait time to 15s (#774)
    e7e7b429 Revert integration test associated with reverted #586 (#784)
    5ccc8cba Add jordimassaguerpla as contributor (#787)
    a0fdd856 Add Rick Harding to CLA signers (#792)
    c343e8b3 HACKING.rst: add clarifying note to LP CLA process section (#789)
    5ec01a57 Stop linting cloud_tests (#791)
    4c190685 cloud-tests: update cryptography requirement (#790)
    a9c904dc Remove 'remove-raise-on-failure' calls from integration_tests (#788)
    1527efa7 Use more cloud defaults in integration tests (#757)
    2d0b6368 Adding self to cla signers (#776)
    e051d542 doc: avoid two warnings (#781)
    b3abcdc0 Use proper spelling for Red Hat (#778)
    ad23441d Add antonyc to .github-cla-signers (#747)
    c25118ac integration_tests: log image serial if available (#772)
    cdc5b81f Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)" (#775)
    9db8620b Release 20.4.1
    6fc9da99 Revert "ssh_util: handle non-default AuthorizedKeysFile config (#586)"
    11630044 [VMware] Support cloudinit raw data feature (#691)
    9a258eeb net: Fix static routes to host in eni renderer (#668)
    162fb839 .travis.yml: don't run cloud_tests in CI (#756)
    7b58982a test_upgrade: add some missing commas (#769)
    37abbc43 cc_seed_random: update documentation and fix integration test (#771)
    503435d1 Fix test gh-632 test to only run on NoCloud (#770)
    2b2c7f39 archlinux: fix package upgrade command handling (#768)
    2bfa461b integration_tests: add integration test for LP: #1910835 (#761)
    4f62ae8d Fix regression with handling of IMDS ssh keys (#760)
    88581e54 integration_tests: log cloud-init version in SUT (#758)
    83ba4d18 Add ajmyyra as contributor (#742)
    75eb007f net_convert: add some missing help text (#755)
    ea6fcc14 Missing IPV6_AUTOCONF=no to render sysconfig dhcp6 stateful on RHEL (#753)
    aa1014ca doc: document missing IPv6 subnet types (#744)
    30da21bd Add example configuration for datasource `AliYun` (#751)
    e5c67478 integration_tests: add SSH key selection settings (#754)
    48b2c5f1 fix a typo in man page cloud-init.1 (#752)
    b85e4a56 network-config-format-v2.rst: add Netplan Passthrough section (#750)
    c5f6c786 stale: re-enable post holidays (#749)
    aa72426b integration_tests: port ca_certs tests from cloud_tests (#732)
    80847b05 Azure: Add telemetry for poll IMDS (#741)
    5d017ab6 doc: move testing section from HACKING to its own doc (#739)
    b9a5da16 No longer allow integration test failures on travis (#738)
    e4f2d613 stale: fix error in definition (#740)
    b944cbe0 integration_tests: set log-cli-level to INFO by default (#737)
    3c076f4c PULL_REQUEST_TEMPLATE.md: use backticks around commit message (#736)
    fad919aa stale: disable check for holiday break (#735)
    f38ba3ca integration_tests: log the path we collect logs into (#733)
    ac17c6a2 .travis.yml: add (most) supported Python versions to CI (#734)
    0b932e55 integration_tests: fix IN_PLACE CLOUD_INIT_SOURCE (#731)
    a5484d02 cc_ca_certs: add RHEL support (#633)
    91381855 Azure: only generate config for NICs with addresses (#709)
    e5f74595 doc: fix CloudStack configuration example (#707)
    eadadaa1 integration_tests: restrict test_lxd_bridge appropriately (#730)
    9e89ca70 Add integration tests for CLI functionality (#729)
    2022bc72 Integration test for gh-626 (#728)
    ca49e27b Some test_upgrade fixes (#726)
    2af3f6d7 Ensure overriding test vars with env vars works for booleans (#727)
    3339a5a4 integration_tests: port lxd_bridge test from cloud_tests (#718)
    9ea845db Integration test for gh-632. (#725)
    8321f0c0 Integration test for gh-671 (#724)
    00dbc144 integration-requirements.txt: bump pycloudlib commit (#723)
    212b291d Drop unnecessary shebang from cmd/main.py (#722)
    97bfd21d Integration test for LP: #1813396 and #669 (#719)
    1d1649e5 integration_tests: include timestamp in log output (#720)
    05216aa3 integration_tests: add test for LP: #1898997 (#713)
    17ca02e1 Add integration test for power_state_change module (#717)
    7ec314a9 Update documentation for network-config-format-v2 (#701)
    b8df2547 sandbox CA Cert tests to not require ca-certificates (#715)
    54e202a6 Add upgrade integration test (#693)
    aa6350f6 Integration test for 570 (#712)
    974145d0 Add ability to keep snapshotted images in integration tests (#711)
    06f7b452 Integration test for pull #586 (#706)
    6c4e87bf integration_tests: introduce skipping of tests by OS (#702)
    ed9bd19c integration_tests: introduce IntegrationInstance.restart (#708)
    bd76d5cf Add lxd-vm to list of valid integration test platforms (#705)
    f550c876 Adding BOOTPROTO = dhcp to render sysconfig dhcp6 stateful on RHEL (#685)
    2bd34bda Delete image snapshots created for integration tests (#682)
    de3183c1 Parametrize ssh_keys_provided integration test (#700)
    53f2bfbb Drop use_sudo attribute on IntegrationInstance (#694)
    6ee01078 cc_apt_configure: add riscv64 as a ports arch (#687)
    4292a47b cla: add xnox (#692)
    bc9c6c22 Collect logs from integration test runs (#675)
    47f4229e Release 20.4 (#686)
    87df9d6c tox: avoid tox testenv subsvars for xenial support (#684)
    6e86d2a5 Ensure proper root permissions in integration tests (#664)
    8a493bf0 LXD VM support in integration tests (#678)
    e454dea5 Integration test for fallocate falling back to dd (#681)
    66a851ac .travis.yml: correctly integration test the built .deb (#683)
    a4d0feb0 Ability to hot-attach NICs to preprovisioned VMs before reprovisioning (#613)
    66b4be8b Support configuring SSH host certificates. (#660)
    5d4a9a4a add integration test for LP: #1900837 (#679)
    12ef7541 cc_resizefs on FreeBSD: Fix _can_skip_ufs_resize (#655)
    73e704e3 DataSourceAzure: push dmesg log to KVP (#670)
    9707a08a Make mount in place for tests work (#667)
    bfaee8cc integration_tests: restore emission of settings to log (#657)
    eea75449 DataSourceAzure: update password for defuser if exists (#671)
    49d5de92 tox.ini: only select "ci" marked tests for CI runs (#677)
    6df0230b Azure helper: Increase Azure Endpoint HTTP retries (#619)
    d807df28 DataSourceAzure: send failure signal on Azure datasource failure (#594)
    96d21dfb test_persistence: simplify VersionIsPoppedFromState (#674)
    cd752df6 only run a subset of integration tests in CI (#672)
    f6801144 cli: add --system param to allow validating system user-data on a machine (#575)
    e1bde919 test_persistence: add VersionIsPoppedFromState test (#673)
    4f2da1cc introduce an upgrade framework and related testing (#659)
    a925b5a0 add --no-tty option to gpg (#669)
    eeef783b Pin pycloudlib to a working commit (#666)
    8a9ee02d DataSourceOpenNebula: exclude SRANDOM from context output (#665)
    38ba6b30 cloud_tests: add hirsute release definition (#662)
    db2ff11d split integration and cloud_tests requirements (#652)
    39cf5c4e faq.rst: add warning to answer that suggests running `clean` (#661)
    2730521f Fix stacktrace in DataSourceRbxCloud if no metadata disk is found (#632)
    57349eb7 Make wakeonlan Network Config v2 setting actually work (#626)
    0dc2d030 HACKING.md: unify network-refactoring namespace (#658)
    d83c0bb4 replace usage of dmidecode with kenv on FreeBSD (#621)
    b542ce7a Prevent timeout on travis integration tests. (#651)
    c86283f0 azure: enable pushing the log to KVP from the last pushed byte  (#614)
    f4235974 Fix launch_kwargs bug in integration tests (#654)
    cf6c36a1 split read_fs_info into linux & freebsd parts (#625)
    d1c01c1d PULL_REQUEST_TEMPLATE.md: expand commit message section (#642)
    8dfd8801 Make some language improvements in growpart documentation (#649)
    0184e536 Revert ".travis.yml: use a known-working version of lxd (#643)" (#650)
    7978feb3 Fix not sourcing default 50-cloud-init ENI file on Debian (#598)
    2c450039 remove unnecessary reboot from gpart resize (#646)
    0af1ff1e cloudinit: move dmi functions out of util (#622)
    d619f517 integration_tests: various launch improvements (#638)
    2ea3121f test_lp1886531: don't assume /etc/fstab exists (#639)
    0ff34cfb Remove Ubuntu restriction from PR template (#648)
    34f8e221 util: fix mounting of vfat on *BSD (#637)
    815a790c conftest: improve docstring for disable_subp_usage (#644)
    8642e8bc doc: add example query commands to debug Jinja templates (#645)
    f8c84aee Correct documentation and testcase data for some user-data YAML (#618)
    0f8be879 Hetzner: Fix instance_id / SMBIOS serial comparison (#640)
    f72d0cb7 .travis.yml: use a known-working version of lxd (#643)
    a6afe9c5 tools/build-on-freebsd: fix comment explaining purpose of the script (#635)
    1431c8a1 Hetzner: initialize instance_id from system-serial-number (#630)

Signed-off-by: Bruce Ashfield <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants